Halo

Sealed by hardware

Wrapped to a passkey via the WebAuthn PRF extension. Only the device that registered the passkey can unlock — not even with the right URL from another machine.

Drop a file or click to browse

Up to 100.0 MB. Encrypted in your browser before upload.

You'll be asked to register or use a passkey. The PRF output from your authenticator becomes the key — only this device can unlock.

What is PRF?

The WebAuthn PRF extension lets a passkey deterministically derive a 32-byte secret from a per-halo salt. The secret never leaves your authenticator until a user gesture authorizes it. Supported on Chrome / Edge / Safari 17+; not yet on Firefox.