Everything Stillroom Vault does, and how.

01 / 05

Keep anything

Files of every kind, notes and secrets, in one vault with folders, tags, versions and search.

• Files of any kind, plus notes and secrets (password-style records with fields).
• Folders, tags, and earlier versions of every item.
• Search across names and contents, from a word index that is itself sealed.
• Drag files and whole folders in. Once each copy is read back and checked by SHA-256, Stillroom can delete the originals.
• Import from Apple Passwords, and scan documents with your iPhone.

02 / 05

View without unsealing to disk

Look at what’s inside without a decrypted copy landing on your SSD.

• Built-in viewers for PDFs, images, sketches, text and email (.eml/.emlx), with Quick Look for everything else.
• Audio and video play straight from the sealed file, streamed in chunks.
• Edit in Place opens documents in their own app from a RAM disk, then seals the changes back.
• Live two-factor codes (RFC 6238) under any secret holding an otpauth link or setup key.

03 / 05

Ways in

Four ways to open your vault, each sealing its key, plus an optional lock to this Mac. Lose one way in, use another.

• Password, stretched with Argon2id (512 MB, 3 passes, 4 lanes).
• Recovery key, made with the vault.
• Emergency kit: Shamir pieces you print and hand out, so that any agreed number of them opens the vault.
• Touch ID, through a Secure Enclave key.
• Lock to this Mac: an outer Secure Enclave seal, so the password alone opens the vault only on this Mac.

04 / 05

Stay shut

It locks itself, hides from capture, and keeps a log of who tried.

• Auto-lock, locking on sleep, and ⌃⌥⌘L to lock and hide from any app, or from the menu bar.
• Every window is hidden from screen capture, and secure keyboard input is on while Stillroom is in front.
• A decoy password that opens a second, harmless vault with its own recovery key, kit and intruder log. On disk the two slots are built alike and nothing marks which one is yours.
• An intruder log: wrong tries, and optionally a photo, sealed so that only an open vault can read them. It never keeps what was typed.

The decoy doesn’t fool someone who has one password and a copy of the folder: they can see the other vault holds something, though not what. It’s protection against thieves and abusers, not police. Rule 2 says exactly what it does and doesn’t do.

05 / 05

Never locked in

Your files are yours: back them up, take them out, or read the vault without us.

• Export everything as plain files.
• Encrypted backups to one file you keep. Restore unpacks beside the vault and swaps it in with a single atomic rename, so a crash midway never leaves you without a vault.
• The format is public, and tools/stillroom-open.py reads a vault in about 300 lines of Python, without the app.