At the heart of Memory Index is AES-256-GCM encryption performed entirely in your browser. When you upload a photo, document, or video, the file is encrypted with a unique key before it leaves your device. The encrypted blob is then stored on our servers—we never have access to the raw content.
Key management is handled through a passphrase-derived approach. Your master passphrase is used to derive an encryption key locally, which in turn protects individual file keys. This means even if our servers were compromised, your data would remain unreadable without your passphrase.
We also support key rotation, allowing you to update your encryption keys periodically without re-uploading your files. Recovery codes provide a safety net in case you forget your passphrase, and our audit trail logs every key operation so you always know what happened and when.