Local-only
desktop file
encryption.
CRYpT encrypts files on your machine using standard, well- reviewed AEAD primitives (AES-256-GCM, ChaCha20-Poly1305) with Argon2id key derivation. Open source under MIT. No cloud, no key escrow, no telemetry. The studio shipped it, learned what local-only privacy primitives feel like, then moved that thinking into VIGIL's on-prem story.
Standard primitives. Local only. No escrow.
Vetted ciphers
AES-256-GCM and ChaCha20-Poly1305: two standard, widely reviewed authenticated ciphers. No bespoke or home-rolled algorithms.
Tamper-evident
Every file is sealed with an authentication tag. Any change to the ciphertext is detected on decrypt and the file refuses to open.
Argon2id
Your passphrase is stretched with Argon2id, a memory-hard key derivation function with tunable cost. Keys are derived locally and never leave the machine.
Privacy is
an architecture,
not a feature.
CRYpT was the studio's argument that local-only encryption should be the default, not the premium tier. Free for the entire base feature set; the Pro tier ($14, one-time) adds batch encryption and metadata wiping. The codebase stays open under MIT.
The studio doesn't actively develop CRYpT anymore. The architectural lesson (no cloud, no escrow, local-first by default) carried over into VIGIL's desktop mode. If you want to use CRYpT, download it; if you want to maintain it, fork it.