DocuID DocsOpen a protected file
Double-click a .docuid — integrity check, access check, decrypt in memory, read in a tab.
Opening a .docuid is read-only by default: the readable copy lives in memory, in a tab,
and is dropped when you quit. There is no Save — your access decides whether print or
plaintext export exist at all.
Open the envelope
Double-click the file (the app owns the .docuid association), drop it on the window,
pick it from Recent documents (⌘H), or run DocuID --open <path>. Files you open
while signed out wait in a queue and continue after unlock.
Pass the checks
The app verifies the envelope's SHA-256 checksum before any network request — a tampered file never triggers an approval push. Then it checks your access:
- You own it — the key unwraps locally and the document opens instantly, even offline for local envelopes.
- You are a recipient — the app fetches your wrapped key; if the share requires owner approval, a biometric prompt goes to the owner's phone.
Read in a tab
Documents open as tabs (up to 8). Switch with ⌘/Ctrl+Tab, ⌘⌥←/→, or ⌘/Ctrl+1–8; closing all tabs keeps the app running. The toolbar shows what your access allows — Read-Only, Decrypted in Memory, and either Print Disabled or an Export option.
PDF, Word, Excel, and PowerPoint render in place. Other formats still decrypt and verify access but show a no-preview state.
Approval states
| State | What happens |
|---|---|
| Awaiting owner approval | The owner's phone got a prompt; this screen auto-unlocks on approve. |
| Access denied | Terminal — ask the document owner to grant or re-share. |
| Integrity check failed | The file changed since it was sealed; get a fresh copy. |
If something goes wrong
| Problem | What to do |
|---|---|
| Stuck on approval | The owner may not have seen the push; ask them to approve. |
| No Export button | Your share does not allow plaintext export. |
| Old file, keys rotated | Unlock again; the app relocks cleanly and keeps your tabs. |