A simple guide to your .cloak vault.
CaskVeil helps you create one encrypted vault file that stays with you. This guide explains what to do, what to remember, and how to avoid the common mistakes.
Vault Basics
What CaskVeil creates
CaskVeil creates a file ending in .cloak. Think of that file as a locked container. Your notes, sections, and attached documents are encrypted inside it before the file is downloaded.
There is no account login for recovering a lost vault. The file belongs to you, and the password belongs to you. If the file or password is lost, CaskVeil cannot rebuild it.
Preparation
Before you start
Pick a strong password
Use something unique that you do not use anywhere else. A longer passphrase is easier to remember and harder to guess.
Choose the right device
Mobile-created vaults are tied to the same mobile device and browser profile. Desktop-created vaults use a 4 digit file PIN with the password.
Plan your backup
Keep at least one backup of the downloaded .cloak file somewhere you trust, such as an encrypted drive or private cloud storage.
Avoid shared devices
Only create or open sensitive vaults on a device you control. Do not use public computers for private vault content.
Device Rule
Important mobile vault disclaimer
A vault created on mobile is designed to open only on the same mobile device and browser profile where it was created. It will not open on desktop, and it should not be expected to open on another phone.
Before choosing the mobile flow, make sure that phone is the device you plan to keep using. If the phone is lost, reset, replaced, or the browser data is cleared, the required local mobile verification may no longer be available for that .cloak file.
Create Flow
Create a vault
-
1
Start with Create Vault
Give the vault a clear name so you can recognize the file later.
-
2
Add your password
This password is required every time the vault opens. CaskVeil does not store it.
-
3
Complete the device check
On desktop, create the 4 digit PIN for this one file. On mobile, confirm the mobile device verification when asked.
-
4
Add sections and documents
Use sections for notes, contacts, recovery details, instructions, or other private information. Attached documents are encrypted into the vault payload.
-
5
Download the .cloak file
The downloaded file is the vault. Move it to a safe place after download.
Unlock Flow
Open a vault
To open a vault, go to Unlock Vault, select the .cloak file, and enter the checks required by that file.
Mobile-created files
Open them on the same mobile device and browser profile where they were created. Enter the password, then complete fingerprint, Face ID, or screen-lock verification.
Desktop-created files
Enter the password and that file's 4 digit PIN. The PIN is only for that vault file and is not a global account PIN.
Edit Safely
Save changes safely
When you edit an unlocked vault, the changes exist in the browser until you save and download an updated .cloak file. The old file on your computer is not magically changed.
- After editing, use Save Changes inside the unlocked dashboard.
- Download the updated .cloak file when the app prepares it.
- Replace your old backup only after you confirm the new file opens correctly.
- Clear the session or close the tab when you are finished viewing private content.
Fix Problems
Troubleshooting
The vault says the password is wrong
Check the exact password, capitalization, and spaces. For desktop-created files, also check the 4 digit file PIN.
A mobile vault will not open on desktop
That is expected for mobile-created vaults. Open the file on the same mobile device and browser profile used during creation, then complete device verification.
The file appears corrupted
Use a fresh copy of the .cloak file from your backup. Do not rename internal data or edit the file contents manually.
You lost the password or PIN
CaskVeil cannot recover it. The vault is designed so only the correct unlock information can decrypt the file.
Final Checklist
What to remember
- Your .cloak file is the vault.
- Your password is required to unlock it.
- Desktop-created vaults also need the file PIN.
- Mobile-created vaults open only on the same mobile device and browser profile where they were created.
- CaskVeil cannot recover lost passwords, lost PINs, or deleted vault files.