DreyVault

Changelog

2.0.0

First DreyVault release.

  • Zero-knowledge encryption: items are encrypted on your devices (Argon2id, AES-256-GCM); the server stores only ciphertext.
  • Signed vault manifest: devices detect a server that drops, swaps or rolls back items.
  • Any number of independent accounts per server, with invites and an admin panel.
  • One-command installer with Cloudflare Tunnel, Tailscale Serve, Let's Encrypt or home-network-only HTTPS. Templates for Umbrel, CasaOS, Unraid and TrueNAS.
  • Built-in encrypted backups (disk, S3/R2, WebDAV, Google Drive, Dropbox) with weekly restore tests.
  • Two-factor sign-in (TOTP, security keys, recovery codes), device list with remote sign-out, travel mode.
  • Attachments, item history, Send links, breach alerts and email aliases.
  • Browser extension for Firefox (desktop and Android), Chrome and Edge.
  • Multi-arch Docker image (amd64, arm64), signed with cosign and shipped with an SBOM.