Varsto

Welcome to Varsto

Create a new vault, join one of your existing vaults, or accept a folder that someone shared with you. Everything is encrypted on this device before it reaches any storage.

Create a new vault here if this is your first device. If you already use Varsto, choose Add a device under Devices on your other device and type the code it shows.

Join your organization

Name for this device Passphrase for this device

Step 1: send an administrator the request code from this device. Step 2: read its six-word fingerprint to them over a call or in person; they see the same words. Step 3: paste the approval token they send back.

Approval token

The token carries the vault key and the storage settings, sealed to this device's request key; only this device can open it.

Accept a shared folder

Device name Passphrase for this device

Step 1: send the owner a request code from this device (it carries the device name above). Step 2: read its six-word fingerprint to the owner over a call or in person; they see the same words. Step 3: paste the sealed token they send back.

Share token Where the owner's vault is

Storage both of you can reach

You get the folder key only: this device can read and write that folder, nothing else of the other vault. A sealed token (vst1… or vst2…) can be opened only here, and this device checks that the owner confirmed its fingerprint; a plain token carries the key itself.

Folders–

Files–

Protected data–

Devices–

Storages–

Background serviceunknown

Folders

Folder	Files	Size	Chunks	Without storage copy	Verified elsewhere	Policy

Data map

On a storage, verified by another device 0 On a storage, not yet verified elsewhere 0 Only on this device, no storage copy yet 0 Unavailable 0 Filled: also on this device 0 Outlined: not on this device 0

Activity

Files

Name	Size	State	Last used

Choose a folder

Pick a folder above, or add a new one.

Durability policies

A policy states how many copies a folder must have, where, and how recently another device must have verified them. Varsto checks it against the ledger on every sync and tells you before a rule is broken.

0 means no rule; a row of zeros removes the folder's policy.

Automatic verification

The background service downloads, within a budget, blocks that other devices wrote, checks their hash and records the check in the ledger, so "verified by another device within N days" stays true. Cold storages and transferrers are never read; nothing runs while the service is paused or locked.

Automatic repair

When verification or a storage check finds a block missing or damaged on one of your storages, the service writes it again from another copy: another storage, this device's files or encrypted blocks, or a peer. Cold storages are read only when you ask; transferrers are never written.

Devices

Traffic

Peer-to-peer transfer

Your devices exchange encrypted blocks directly: on the LAN automatically, across the internet through NAT with hole punching, and when that fails through one of your own reachable devices acting as a relay. Blocks are verified by name; a peer needs the vault key and a known certificate to get anything.

Devices in this vault

Remove a device you no longer use, or one that was lost or stolen: it stops syncing and cannot read anything written afterwards. Add one with Add a device under Peers.

Use with a team

An organization adds administrators who approve devices, remove people with every device of theirs at once, set what members may do, and keep a signed log of it. Nothing changes for a vault without one.

Appearance

The interface follows the system theme unless you choose one.

Service

The background service watches your folders and serves this interface on this computer only. Quitting stops syncing until Varsto is started again.

Duplicate files

Ledger batches

Overview

Welcome to Varsto

Pair with your other device

Create a new vault

Join with the vault key

Join your organization

Accept a shared folder

Unlock Varsto

Folders

Data map

Where your data is

Activity

Add a folder

Attach a folder from another device

Shared folders

Untrusted replica

Storages

Add a disk to a pool

Add a storage

Durability policies

Automatic verification

Automatic repair

Devices

Traffic

Relayed through this device

People and their devices

Approve a device

What members may do

Administrators

Devices in this vault

Appearance

Plain files on this phone

Camera upload

Service

Start over on this device alpha