Everything below is live sync metadata. Master passwords, data keys, host names and
credentials never reach the server — only opaque XChaCha20-Poly1305 ciphertext does. Inspect any
account to see exactly what a record looks like from here.
EXPOSURE
0 plaintext
enforced by design
Overview
Accounts
—
Devices
—
Vault records
—
ciphertext blobs + tombstones
Encrypted storage
—
opaque encrypted blobs
Accounts
Account
Created
Devices
Records
Tombstones
Storage
Last activity
Enter the admin token and press Connect.
What the server actually stores for
Type
Record ID
Version
State
Bytes
Seq
Ciphertext preview
The preview is the real first bytes of each blob. Without the dataKey it is irreversible
noise — a full database dump reveals only this structure, never content.
Devices
Device
Platform
Last sync
Status
—
Recent activitymetadata only
—
The audit log records only the event, account, device and a human-readable summary (counters /
cursors) — never content. Purge tombstones only removes deletion markers every
device has already synced past, so it can never resurrect a record. Delete account
cascades its records, devices and pairing sessions — irreversibly.