Question 1

What is Qpher Vault?

Accepted Answer

Qpher Vault is an iOS app that lets you encrypt, sign, and securely share sensitive documents using post-quantum cryptography (PQC). It uses NIST-standardized algorithms (ML-KEM-768 for encryption and ML-DSA-65 for signatures) that protect your data against both today's and future quantum computer attacks.

Question 2

What devices are supported?

Accepted Answer

Qpher Vault is available for iPhone and iPad running iOS 16 or later. You can download it for free from the App Store.

Question 3

Do I need technical knowledge to use Qpher Vault?

Accepted Answer

Not at all. Qpher Vault is designed for non-technical users. Simply download the app, create an account, and you can encrypt your first document in under 60 seconds. The complex cryptography happens behind the scenes.

Question 4

What file types can I encrypt?

Accepted Answer

Qpher Vault supports all common file types including PDF, DOCX, XLSX, images (JPEG, PNG), and more. Any file you can share from your iPhone can be encrypted with Qpher Vault.

Question 5

What encryption algorithms does Qpher Vault use?

Accepted Answer

Qpher Vault uses ML-KEM-768 (FIPS 203) for key encapsulation and AES-256-GCM for symmetric encryption. For maximum security, we use X-Wing hybrid mode which combines classical X25519 with ML-KEM-768, protecting against both classical and quantum attacks.

Question 6

Where are my encryption keys stored?

Accepted Answer

Your device-level keys are stored in the iPhone's Secure Enclave — a dedicated hardware security chip. Server-side keys are managed by our KMS with AES-256-GCM encryption at rest (Level 1) or Cloud KMS envelope encryption (Level 2). Private keys never leave the secure boundary.

Question 7

Can Qpher access my encrypted documents?

Accepted Answer

No. Qpher Vault uses a zero-knowledge architecture. Your documents are encrypted on your device before being uploaded. We never have access to your plaintext data or the keys needed to decrypt it.

Question 8

What happens if I forget my password?

Accepted Answer

You can reset your password through the app using your registered email address. Your encrypted documents remain safe — the encryption keys are tied to your account, not your password.

Question 9

How do I share encrypted documents?

Accepted Answer

Open any encrypted document, tap the share button, enter the recipient's email address, set permissions (view-only or download), and optionally set an expiration date. The recipient will receive a notification to view the document in Qpher Vault.

Question 10

What is the difference between view-only and download permission?

Accepted Answer

View-only recipients can see the document within the app but cannot download or export the original file. A watermark with the recipient's identity is displayed. Download permission allows recipients to save the decrypted file to their device.

Question 11

Can I share documents with people who don't have Qpher Vault?

Accepted Answer

Yes. When you share with someone who doesn't have Qpher Vault yet, they'll receive an invitation to download the app. Once they create an account, the shared document will be automatically available to them.

Question 12

Can I revoke access to a shared document?

Accepted Answer

Shared documents have configurable expiration dates (1 day, 7 days, 30 days, or 90 days). After expiration, recipients can no longer access the document. You can also set 'prevent reshare' to stop recipients from sharing with others.

Question 13

Is Qpher Vault free to use?

Accepted Answer

Yes. The Explorer plan is completely free and includes 50 MB of storage and 3 shares per month. No credit card is required. Upgrade to Personal ($7.99/month or $79/year) for 5 GB storage, 50 shares per month, access logs, and hybrid encryption.

Question 14

How do I upgrade my plan?

Accepted Answer

Open the Account tab in the app, tap 'Subscription', and choose your preferred plan. Upgrades are processed through Apple In-App Purchase and take effect immediately.

Question 15

Can I cancel my subscription?

Accepted Answer

Yes. You can cancel your subscription at any time through the App Store. Your plan continues until the end of the current billing period, then reverts to the free Explorer plan. All your encrypted documents are preserved.

Question 16

Do you offer business or enterprise plans?

Accepted Answer

Yes. Business plans include team management, access logs, organization policies, and priority support. Contact our sales team at sales@qpher.ai for pricing and details.

Question 17

What is post-quantum cryptography?

Accepted Answer

Post-quantum cryptography (PQC) uses mathematical algorithms that are resistant to attacks from quantum computers. Traditional encryption (RSA, ECC) will be broken when large-scale quantum computers become available. PQC algorithms like ML-KEM-768 and ML-DSA-65 are designed to remain secure even against quantum attacks.

Question 18

Is my data safe if I lose my phone?

Accepted Answer

Yes. All documents are encrypted at rest with AES-256-GCM, and your encryption keys are protected by the iPhone's Secure Enclave hardware. Even with physical access to the device, your data cannot be decrypted without biometric authentication (Face ID).

Question 19

Does Qpher Vault prevent screenshots?

Accepted Answer

Yes. Qpher Vault includes screen capture detection that blocks screenshots and screen recordings when viewing encrypted documents. This protects sensitive information from being captured inadvertently or maliciously.

Question 20

How does the watermark feature work?

Accepted Answer

When a document is shared with view-only permission, the recipient's email address is displayed as a visible watermark across the document. This discourages unauthorized distribution by making it traceable to the specific recipient.

Question 21

How do I invite team members to my organization?

Accepted Answer

Open the Account tab, go to Organization settings, and tap 'Invite Member'. Enter the team member's email address and they'll receive an invitation. Once they accept and download Qpher Vault, they'll automatically join your organization with shared encryption keys.

Question 22

What plan do I need for team features?

Accepted Answer

Team management is available on Starter plans ($79/month) and above, or included with Qpher API Professional and Enterprise plans. The free Explorer and Personal plans are designed for individual use.

Question 23

Can I manage team members' access?

Accepted Answer

Yes. Organization owners and admins can invite members, suspend access immediately, and remove members permanently. Suspended members instantly lose access to all shared documents and encryption keys.

Question 24

What happens when a team member leaves the organization?

Accepted Answer

When you remove a member, their access to all shared organization documents is revoked immediately. Their Vault account reverts to a personal account with the free Explorer plan. Documents they encrypted personally remain accessible to them.

Question 25

Why can't I decrypt a document?

Accepted Answer

Common causes: (1) The document was encrypted with a different account — make sure you're signed in with the correct account. (2) If you're in an organization, ensure your membership is active. (3) For shared documents, check that the share hasn't expired. If the issue persists, contact support@qpher.ai.

Question 26

Why is my shared document showing as 'pending'?

Accepted Answer

A 'pending' status means the recipient hasn't created their Qpher Vault account yet. Once they download the app and register with the email address you shared to, the document will automatically become available to them. Pending shares remain active for 30 days.

Question 27

How do I restore my account on a new device?

Accepted Answer

Download Qpher Vault on your new device and sign in with your existing account (Apple Sign In or email). Your encrypted documents and sharing history will sync automatically. New device-level encryption keys are generated in the Secure Enclave.

Question 28

Face ID is not working with Qpher Vault. What should I do?

Accepted Answer

Make sure Face ID is enabled in your iPhone Settings > Face ID & Passcode. Then open Qpher Vault > Account > Security and toggle on 'Biometric Lock'. If Face ID still doesn't work, try removing and re-adding your face in iPhone Settings.

Question 29

How do I get started with the Qpher API?

Accepted Answer

Sign up at portal.qpher.ai, create a workspace, and generate your first API key. The Explorer plan is free with 5,000 API calls per month. Follow our quickstart guide at docs.qpher.ai to make your first encryption call in under 5 minutes.

Question 30

What programming languages are supported?

Accepted Answer

We provide official SDKs for Python and Node.js (both priority P0). A Go SDK is on our roadmap (P1). You can also use any language that supports REST API calls — our API is standard HTTP with JSON payloads.

Question 31

What is the difference between API Platform and Vault App?

Accepted Answer

The API Platform is for developers integrating PQC into their applications (server-to-server). Vault App is an iOS app for end users to encrypt and share documents. Professional API plans include Vault Business features for your team.

Question 32

What PQC algorithms does the API support?

Accepted Answer

ML-KEM-768 (FIPS 203) for key encapsulation and ML-DSA-65 (FIPS 204) for digital signatures. Hybrid mode (X-Wing KEM: X25519 + ML-KEM-768) is available on Starter plans and above for dual classical + quantum protection.

Question 33

How does key management work?

Accepted Answer

Keys are managed through our KMS Orchestrator. Generate, rotate, retire, and archive keys via API. Private keys never leave our secure boundary — stored with AES-256-GCM (Level 1) or Cloud KMS envelope encryption (Level 2 on Professional+).

Question 34

What is the key_version parameter?

Accepted Answer

Every PQC operation requires an explicit key_version. For encrypt/sign, use an 'active' key. For decrypt/verify, you can use 'active' or 'retired' keys. There is no implicit 'latest' default — this prevents accidental key usage errors.

Question 35

What API plans are available?

Accepted Answer

Explorer (Free, 5K calls/mo), Starter ($79/mo, 15K calls), Professional ($199/mo, 50K calls), Enterprise ($399/mo, 200K calls), and Enterprise+ (custom). All paid plans include a 14-day free trial.

Question 36

Does the Professional plan include Vault App access?

Accepted Answer

Yes. Professional ($199/mo) and above include Vault Business features: multiple Vault accounts for your team, admin portal, team invitations, shared org tenant, and organization policies. Your team members get Vault Business automatically.

Question 37

How is API usage metered?

Accepted Answer

Each API call (encrypt, decrypt, sign, verify, key operations) counts as one call toward your monthly quota. Quota resets on the first of each month. You can monitor usage in real-time via the Portal dashboard.

Question 38

Is Qpher SOC 2 compliant?

Accepted Answer

SOC 2 Type II certification is on our compliance roadmap. We currently implement all SOC 2 Trust Service Criteria controls. Our Trust Center at qpher.ai/trust provides detailed information on our security practices, data handling, and incident response.

Question 39

How does tenant isolation work?

Accepted Answer

Every API customer gets a dedicated tenant with 4-layer isolation: repository-level filtering, database constraints, application context, and gateway enforcement. Cross-tenant access is architecturally impossible — queries always include tenant_id.

Question 40

What happens if the API is unavailable?

Accepted Answer

Qpher follows a fail-closed security model. If any service is unavailable, requests are denied rather than allowed. SLA guarantees range from 99.5% (Starter) to 99.95% (Enterprise+). Check status.qpher.ai for real-time availability.

Ask Qpher AI