Nuvaka › Secure Space
Secure Space: an end-to-end encrypted section
Secure Space is an end-to-end encrypted section inside My files. Files are encrypted on your device and only reach the server encrypted; the keys never leave your device. Nobody, Nuvaka included, can see this content.
How it works
- You choose a password at setup; the key is derived from it on your device. Your password is never sent to the server.
- Every file version is encrypted with its own random key; previews and downloads are decrypted on your device.
- You can also encrypt file and folder names; names are only visible while unlocked.
- When you move a file from the regular area into Secure Space, it is encrypted on your device first, and you are asked whether to delete its old unencrypted versions.
- When you move something out, it is decrypted on your device and you explicitly confirm that it will be stored unencrypted.
Recovery key
At setup you get a recovery key that is shown only once; Secure Space cannot be set up without one. If you forget your password, open it with this key and set a new password. If you lose both your password and your recovery key, your data is lost for good; Nuvaka does not know your keys and cannot recover them.
Device approval
A device where you opened Secure Space can be remembered: the key is wrapped to a device key kept in the operating system's key store, so later launches do not ask for the password. On a new device, enter the password or the recovery key, or send a request to a device where Secure Space is open and approve it there. You can lock any device at any time.
What is closed in this section
- No server previews or thumbnails; content is only shown on your device.
- No public links and no sharing with friends.
- Extensions cannot access files in this section.
- The assistant cannot read the content, and cannot rename items when names are encrypted.
- Secure Space does not open in the web version yet; use the desktop or mobile app.
Frequently asked
Can Nuvaka see my files?
No. The server only stores encrypted content and key envelopes it cannot open. Details such as file size and dates are visible; names can be encrypted too.
I forgot my password. What now?
On the lock screen choose "Recovery key", enter it and set a new password. If you do not have the recovery key either but Secure Space is open on another device, you can create a new recovery key there.
Can I link my sync folders to Secure Space?
This is coming: linking sync roots to Secure Space with blocks encrypted on the device is the next step.