01
Token-only identity
No email, no password, no profile. A 16-character token gets you in and unlocks your files on a new device. One credential, nothing else to verify, nothing to resell.
Private file storage
Private storage.
No identity attached.
Encrypted file storage without the paperwork. No email, no password, no profile — just a 16-character token. Your token logs you in and unlocks your encrypted files on any device. Files are encrypted in your browser before they touch the server.
No email. No password. 1 GB free.
What you get
Everything you need.
Nothing that identifies you.
A small, deliberate set of tools: encrypted files, folders, and links. No activity feed, no collaboration suite, no profile to fill in.
02
Encrypted before upload
Files are sealed with AES-256-GCM in your browser. The server stores ciphertext and a vault key wrapped with your token; it never receives the unwrapped key. It cannot open what it stores.
03
Folders that behave
Create folders, drag files in, rename, move, delete. One gigabyte free, up to 1 GB per file, and paid plans up to 1 TB. The dashboard stays out of the way and works on a phone.
04
Share links you can revoke
Send a file with one link. The recipient needs no account. The decryption key lives only in the link fragment, so the server never sees it. Revoke the link and downloads stop immediately.
How it works
Three steps.
One of them matters.
Creating the account is instant. Keeping the token is the part that deserves your attention.
01
Create an account
One button, no fields. Your vault and encryption keys are created in your browser; the server only receives the wrapped key.
02
Save your token
We show the token once. Download the file or put it in your password manager. The same token gets you in and decrypts your files on a new device.
03
Upload and share
Drag files into the vault, sort them into folders, and hand out a link when someone needs one. The link carries its own decryption key, and you can revoke it any time.
The token is shown once and cannot be recovered. Lose it while signed out and the account is gone. There is no second key and no reset. That is the trade for an account with no identity attached.
Privacy
We don't know who you are.
That's the point.
BOKS is built around not collecting identity. There is no email field to leak, no password database to crack, and no analytics script watching this page. Privacy here is the absence of data, not a setting you have to find.
No email
Nothing to send
No address on file. No reset links, no marketing, no contact list, no identity to resell.
No analytics
No third-party scripts
Fonts and code load from this server only. There is no cookie banner because there are no tracking cookies.
No scanning
Files stay files
Even someone with the disk would find ciphertext. The app cannot read, index, or inspect your uploads — decryption happens in your browser.
Self-hostable
Yours to run
One container, one SQLite database, one volume for the files. Audit it, or run it on hardware you control.
NO ANALYTICS · NO AD COOKIES · NO THIRD-PARTY SCRIPTS
Pricing
One gigabyte free.
More if you need it.
No card. No trial timer. Buy monthly or yearly in BTC or LTC. Yearly includes two months free, and paid accounts are exempt from inactivity deletion while active.
BOKS / Free
Start
1 GB
Free forever
- 1 GB encrypted storage
- Up to 1 GB per file
- Folders and revocable links
BOKS / Plus
100 GB
100 GB
0.00025 BTC or 0.35 LTC / year
or 0.000025 BTC / 0.035 LTC per month
·
- 100 GB encrypted storage
- 1 GB maximum file size
- Exempt while the plan is paid
BOKS / Pro
Recommended
500 GB
0.0006 BTC or 0.85 LTC / year
or 0.00006 BTC / 0.085 LTC per month
·
- 500 GB encrypted storage
- 1 GB maximum file size
- Exempt while the plan is paid
BOKS / Studio
1 TB
1 TB
0.0009 BTC or 1.25 LTC / year
or 0.00009 BTC / 0.125 LTC per month
·
- 1 TB encrypted storage
- 1 GB maximum file size
- Exempt while the plan is paid
Prices are fixed in crypto; the USD line is a live approximation of the BTC spot rate and changes with the market. Yearly is ten months, two free. Monthly and yearly purchases stack: buying more time adds it to your current paid-until date. On-chain network fees are extra. Plans activate after the required confirmations.
Questions
The honest
answers.
Eight things worth knowing before you trust a server with your files. None of them are complicated.
What happens if I lose my token?
You lose access. There is no email address on file to send a reset link to, and the token is stored only as a hash — we cannot read it back to you. You can create a new account and upload the files again.
Can I generate a new token?
Yes, while you are still signed in. The account page can issue a new token, which invalidates the old one and signs out every other session. If you are signed out and the token is gone, there is no way back in.
Can I add two-factor authentication?
Yes. After creating an account, open Account → Two-factor authentication and scan the QR code with any TOTP authenticator app (Aegis, 1Password, Google Authenticator). You can turn it off or replace the recovery codes later from the same panel. Two-factor authentication gates login; it does not change the token-derived encryption key. Your token is still the only way to decrypt the vault, and recovery codes are one-time login backups if you lose the authenticator app.
Is my data end-to-end encrypted?
File contents are. Your browser encrypts every file with AES-256-GCM using a per-file key, then wraps that key with a vault key. The vault key itself is wrapped with a key derived from your account token. The server stores ciphertext and opaque wrapped keys; it has no usable vault key at rest. File names, sizes and timestamps remain visible. The same token unlocks your files on a new device.
Do inactive accounts get deleted?
Yes. A free account with no activity for 180 days is deleted automatically, along with every file, folder, and share link. Opening the vault, logging in, uploading, or downloading counts as activity; downloading someone else's share link does not. Paid accounts are exempt while the plan is active. After a plan expires, the account drops to 1 GB immediately and uploads are blocked while it is over that limit. If it is still over 1 GB 60 days after expiry, the oldest files are removed until it is back within 1 GB — for example, 5 GB of files becomes 1 GB or less — unless you renew. The six-month inactivity window then starts from the later of your last activity and the expiry date. There is no warning email because we do not collect one.
How do paid plans work?
Plans are paid on-chain in BTC or LTC, monthly or yearly. Yearly is ten months, so you get two months free. Choose a plan, send the exact amount shown to the address on the invoice, and the server activates it after the configured confirmations. There are no cards and no automatic renewals. Buying more time adds it to your current paid-until date, so a monthly purchase followed by a yearly one keeps the remaining month and adds a full year. Network fees are extra.
Can I self-host BOKS?
Yes. It runs as a single Docker container with SQLite and a volume for the file blobs. Put it behind your own TLS terminator. Storage quota, maximum file size, plan prices and the BTC/LTC receiving addresses are configuration, and the code is auditable.
One gigabyte. One token.
No identity.
Create an account in one click, save your token, and upload something encrypted.