DocuID DocsProtect a file
Turn any supported file into a portable .docuid envelope — in the cloud, on this device, or fully offline.
Protecting encrypts a file on this device (AES-256, keys from your vault) and wraps the
result in a .docuid envelope. The plaintext never uploads — only ciphertext.
Drop the file in
Drag any file onto the home screen, click Choose a file from disk, or right-click a
file in Explorer → Encrypt with DocuID (Windows) / the macOS Quick Action. Terminal:
DocuID --encrypt <path>.
Pick a protection level
| Mode | What it means |
|---|---|
| Protected in cloud | Encrypted copy uploads to your vault — preview it on app.docuid.net and share like any document. |
| Device envelope only | The .docuid stays local; you can still add recipients and revoke — they need the app to open it. |
| Local Only | Fully offline. No server call, no entry in your vault, cannot be shared. Ideal for USB/backup. |
All three produce the same .docuid format; only the bookkeeping differs. Check
Remember for future files to skip this picker next time.
Get the envelope
The app writes <name>.docuid next to the original, or into your
output folder if you set one. It never overwrites — a second run
creates name (2).docuid. The result card offers Open (verify it yourself),
Reveal in Finder / Explorer, and recipients if sharing applies.
What is inside a .docuid
An envelope is a header plus ciphertext. The header carries the document id, original file name, MIME type, and the key-wrapped decryption key — no passwords, no recipient details, no readable content. The whole payload is verified by SHA-256 checksum before any decryption is attempted.
If something goes wrong
| Problem | What to do |
|---|---|
| Unsupported file type | Only ~30 registered types are accepted; zip it or export to PDF first. |
| File too large | Intake caps at 500 MB per file. |
| Output folder unavailable | The app falls back to the source folder; re-pick it in Settings. |