Create your FileX ID
A FileX ID is a keypair that lets people encrypt files only you can open — and lets you sign files so others know they came from you. It is generated on your device and never leaves it.
Open this tool in FileX →How it works
- Open the New ID tool and set a keystore passphrase. This encrypts your private keys locally with Argon2id.
- FileX generates a hybrid keypair — X25519 and ML-KEM-768 for encryption, ML-DSA-65 for signatures — entirely in your browser.
- Copy your public FileX ID and share it with anyone who wants to send you files. Read the 6-word fingerprint aloud to confirm it over a call.
- Download the
.fxkbackup and keep it safe — it is the only way to restore your ID on another device.
Why hybrid post-quantum
Each encryption combines a classical algorithm (X25519) with a NIST-standardized post-quantum one (ML-KEM-768). Your files stay secure if either holds — so a future quantum computer that breaks one does not break your files. This is the answer to "harvest now, decrypt later" attacks.
Your private keys never leave your device
Private keys are stored in your browser, encrypted with AES-256-GCM under a key derived from your passphrase with Argon2id (m=64 MiB). FileX has no server that can see them. The trade-off: if you lose the device and the .fxk backup, files sent to that ID are unrecoverable — by design.
Frequently asked questions
Is my private key uploaded or escrowed anywhere?
No. Keys are generated and stored only in your browser, encrypted with your passphrase. There is no directory or key-escrow server — you share your public ID out of band (a message, a QR-able string).
What if I lose my passphrase or my device?
Your keystore passphrase cannot be reset, and without your .fxk backup a lost device means the ID (and files encrypted to it) cannot be recovered. Store both in a password manager.
What is the 6-word fingerprint for?
It is a human-verifiable summary of your public keys (like a Signal safety number). A sender can read it back to you over a second channel to be sure they have your real ID, not a substituted one.