Encrypted Mac backups
you can browse in any tab.
Versioned, deduplicated snapshots sealed on your Mac before they ever leave. Restore from the menu bar, the CLI, or a browser — decryption happens client-side, every time.
$ restorekit backup Backed up ~/Documents/cotizaciones: snapshot 4bd3159d (10 files changed, 0 unchanged, 1 pack) $ restorekit snapshots 4bd3159d 2026-05-28 05:48 ~/Documents/cotizaciones $ restorekit restore latest --target ~/restored Restored snapshot 4bd3159d ✓ verified
In any browser
Decryption that runs in your tab — not on our servers.
A WebAssembly build of the same Rust engine your Mac runs ships into your browser, derives the key with Argon2id locally, and verifies every chunk with BLAKE3. The server fetches ciphertext on demand and never sees a single byte of plaintext.
- One Rust implementation. Same code on your Mac, your menu bar app, and the tab.
- Walk the tree lazily. A 131 GB / 2.25M file backup renders in milliseconds — only the path you open is decrypted.
- Preview + bulk-ZIP download. Images, PDFs, code, JSON — streamed through
client-zip, chunk-by-chunk.
BLAKE3 + content-defined chunking dedupes everything that hasn't changed. The first backup is the only big one.
Per-blob XChaCha20-Poly1305, sealed on your Mac. A breach of our infrastructure leaks ciphertext, sizes, and access times — nothing more.
The same Rust crate the daemon uses, compiled for the browser. Loads on demand so marketing pages stay light.
Your keys. Your data.
Nobody else's.
A passphrase derives your key with Argon2id; a random master key encrypts every chunk with a fresh nonce. The cloud holds only opaque, authenticated ciphertext.
Zero-knowledge isn't a slogan — it's why the /browse page still works without a server-side key.
- XChaCha20-Poly1305 per-chunk, sealed before upload
- Argon2id passphrase, key in your macOS Keychain
- BLAKE3 content addressing — verified on every read
Stop renting your own files back from Apple.
Create your account and have a Mac backing up in under a minute.