Everything You Need, Fully Encrypted
PassedBox works like a file system you already know — folders, files, drag & drop — except everything is encrypted at rest with AES-256-GCM. Your keys never leave your device.
Military-Grade Encryption
AES-256-GCM
Every file is individually encrypted with AES-256 in GCM mode, providing both confidentiality and integrity verification. Tampered data is automatically detected.
Argon2id Key Derivation
Your master password is strengthened with Argon2id — the winner of the Password Hashing Competition — making brute-force attacks computationally impractical.
Shamir's Secret Sharing
Your master key is split into cryptographic shares. Any 2 of 3 shares can reconstruct it — enabling secure recovery without a single point of failure.
Hardware-Locked Passwords
Optionally tie your vault password to a specific drive's serial number. The vault becomes undecryptable on any other device — even with the correct password.
Zero-Knowledge Architecture
No accounts, no telemetry, no cloud sync. PassedBox never sees your data, your keys, or even knows you exist. It's just you and your vault file.
Portable Vault Files
Each vault is a single .pbx directory you can store anywhere — USB drives, NAS, cloud
storage, or your local disk. Move it wherever you want.
Full File System
Folders & Hierarchy
Organize your files in nested folders just like your operating system. Create, rename, move, and delete folders freely within the encrypted vault.
Import Files & Folders
Import individual files or entire folder trees from your system. The directory structure is preserved and everything is encrypted as it enters the vault.
Export & Decrypt
Export single files or bulk-select multiple items to decrypt and save them back to your file system. Folder structures are preserved on export.
Drag & Drop
Drag files between folders, drop them on breadcrumbs to move, or drag from your desktop into the vault. It works just like you'd expect.
Cut, Copy & Paste
Full clipboard support with Ctrl+X, Ctrl+C, Ctrl+V. Copy uses copy-on-write pointers for instant duplication without wasting space.
Cross-Vault Operations
Copy files between different vaults seamlessly. Data is re-encrypted with the target vault's key automatically — no manual export/import needed.
Built-In Viewer & Editor
Image Preview
View images (PNG, JPG, GIF, SVG, WebP) directly inside the vault — decrypted in memory, never written to disk.
Video & Audio Playback
Play MP4, WebM, MP3, WAV, and OGG files with the built-in media player. No external apps needed — everything stays encrypted until the moment it's rendered.
PDF Viewer
Open and read PDF documents directly within the app. Decrypted in memory and rendered in an embedded viewer.
Monaco Code Editor
Edit text files with the same editor that powers VS Code. Full syntax highlighting for 30+ languages including JavaScript, Python, Go, HTML, CSS, JSON, YAML, and more.
Create & Edit In-Vault
Create new text files directly inside the vault and edit them with Ctrl+E. Save with Ctrl+S. No need to export, edit, and re-import.
Force Text Mode
Open any file as plain text — useful for inspecting binary metadata, debugging, or viewing files with unrecognized extensions.
Power User Interface
Global Search
Search across all unlocked vaults simultaneously. Results show full file paths with breadcrumb navigation — click to jump directly to any file.
Grid & List Views
Switch between a visual grid view with type-based icons and a compact list view with file sizes. Toggle with a single click.
Keyboard Shortcuts
Navigate with arrow keys, select with Shift, delete with Del, rename with F2, search with Ctrl+F, create files & folders with Ctrl+N — all without touching the mouse.
Breadcrumb Navigation
Visual breadcrumb trail at the top with full drag-and-drop support. Drop files onto any breadcrumb to move them instantly.
Multi-Select
Click to select, Ctrl+Click for individual multi-select, Shift+Click for range selection. Bulk delete, export, move, or copy entire selections at once.
Dark & Light Themes
Full dark mode and light mode support with automatic system detection. Toggle freely from the toolbar.
Dead Man's Switch
Ensure your vault is accessible to your trusted contacts if you become unavailable. Your files never leave your device — only an encrypted key share is stored on the server.
Credit Expiration Trigger
When enabled, the encrypted key share is released when your prepaid credits run out. Don't renew to trigger it — or buy more anytime to keep it held.
Keep-Alive Check-In
When enabled, you must periodically confirm you're active. Miss your check-ins via calendar reminders or web push notifications and the share is released.
Passwordless Recovery
Once triggered, anyone with the vault file can decrypt it using Share 1 + Share 3, requiring no password. Then set a new password to re-secure the vault.
Ready to Secure Your Files?
Download PassedBox for free. No account required.