CASKVEIL GUIDE

A simple guide to your .cloak vault.

CaskVeil helps you create one encrypted vault file that stays with you. This guide explains what to do, what to remember, and how to avoid the common mistakes.

What CaskVeil creates

CaskVeil creates a file ending in .cloak. Think of that file as a locked container. Your notes, sections, and attached documents are encrypted inside it before the file is downloaded.

There is no account login for recovering a lost vault. The file belongs to you, and the password belongs to you. If the file or password is lost, CaskVeil cannot rebuild it.

Before you start

Pick a strong password

Use something unique that you do not use anywhere else. A longer passphrase is easier to remember and harder to guess.

Choose the right device

Mobile-created vaults are tied to the same mobile device and browser profile. Desktop-created vaults use a 4 digit file PIN with the password.

Plan your backup

Keep at least one backup of the downloaded .cloak file somewhere you trust, such as an encrypted drive or private cloud storage.

Avoid shared devices

Only create or open sensitive vaults on a device you control. Do not use public computers for private vault content.

Important mobile vault disclaimer

A vault created on mobile is designed to open only on the same mobile device and browser profile where it was created. It will not open on desktop, and it should not be expected to open on another phone.

Before choosing the mobile flow, make sure that phone is the device you plan to keep using. If the phone is lost, reset, replaced, or the browser data is cleared, the required local mobile verification may no longer be available for that .cloak file.

Create a vault

  1. 1

    Start with Create Vault

    Give the vault a clear name so you can recognize the file later.

  2. 2

    Add your password

    This password is required every time the vault opens. CaskVeil does not store it.

  3. 3

    Complete the device check

    On desktop, create the 4 digit PIN for this one file. On mobile, confirm the mobile device verification when asked.

  4. 4

    Add sections and documents

    Use sections for notes, contacts, recovery details, instructions, or other private information. Attached documents are encrypted into the vault payload.

  5. 5

    Download the .cloak file

    The downloaded file is the vault. Move it to a safe place after download.

Open a vault

To open a vault, go to Unlock Vault, select the .cloak file, and enter the checks required by that file.

Mobile-created files

Open them on the same mobile device and browser profile where they were created. Enter the password, then complete fingerprint, Face ID, or screen-lock verification.

Desktop-created files

Enter the password and that file's 4 digit PIN. The PIN is only for that vault file and is not a global account PIN.

Save changes safely

When you edit an unlocked vault, the changes exist in the browser until you save and download an updated .cloak file. The old file on your computer is not magically changed.

  • After editing, use Save Changes inside the unlocked dashboard.
  • Download the updated .cloak file when the app prepares it.
  • Replace your old backup only after you confirm the new file opens correctly.
  • Clear the session or close the tab when you are finished viewing private content.

Troubleshooting

The vault says the password is wrong

Check the exact password, capitalization, and spaces. For desktop-created files, also check the 4 digit file PIN.

A mobile vault will not open on desktop

That is expected for mobile-created vaults. Open the file on the same mobile device and browser profile used during creation, then complete device verification.

The file appears corrupted

Use a fresh copy of the .cloak file from your backup. Do not rename internal data or edit the file contents manually.

You lost the password or PIN

CaskVeil cannot recover it. The vault is designed so only the correct unlock information can decrypt the file.

What to remember

  • Your .cloak file is the vault.
  • Your password is required to unlock it.
  • Desktop-created vaults also need the file PIN.
  • Mobile-created vaults open only on the same mobile device and browser profile where they were created.
  • CaskVeil cannot recover lost passwords, lost PINs, or deleted vault files.