Docs Logo
FoxcolabDocs
E2EE EDITOR
Zero-Knowledge Collaboration

Secure documents.
Protected with End-to-End Encryption.

Foxcolab Docs is a production-grade markdown workspace designed for extreme privacy. Real-time typing, offline storage, and document keys are secured at the hardware and browser sandbox layers.

foxcolab-docs://workspace/e2ee-cryptography-spec
Synced & Encrypted
Workspace Docs5
๐Ÿ“„ E2EE Cryptography Spec
๐Ÿ“ Security Assets
๐Ÿ“„ Key Derivation.md
๐Ÿ“„ Recovery Flow.spec
ME
Local DeveloperSecure Session
Alex (typing...)
Sophia

๐Ÿ”’ Zero-Knowledge Warning: All document modifications are synced live over state vectors encrypted using AES-256-GCM.

1. Algorithm Design

This spec covers the multi-level key derivation algorithm...

Cryptographic derivation flowverified
$ npm run derive-keys --identity
> Generating Master Identity Key (MIK) from local hardware profile...
> Deriving client-side Product Key using PBKDF2 iterations...
> Encrypting workspace secrets with MIK... Done [AES-GCM-256]

Secure collaborative documents without compromises

Foxcolab Docs combines the convenience of cloud workspaces with the absolute cryptographic privacy of client-side encryption.

Zero-Knowledge E2EE

All document content and folder structures are encrypted using client-side keys. We never have access to your keys or readable files.

Real-Time State Sync

Seamless real-time editing powered by Yjs CRDTs. Collaborative updates are securely synchronized and decrypted in-memory.

Offline Workspace

Snapshots are cached in your local IndexedDB. Keep working offline and synchronize when reconnected without risking data loss.

High-Fidelity Crypto Layers

Multi-Level Cryptographic Architecture

Your identities, workspaces, and files are mapped using distinct keys client-side to isolate data breaches.

1

Zero-Knowledge Document Keys

Every document has a unique, random 256-bit symmetric key. This document key encrypts title, content state, and comments. It is never stored in plaintext on our database.

2

Master Identity Key (MIK)

Derived using PBKDF2 hashing directly from your master password. Used as a master key to wrap and encrypt your Workspace key and Document keys before uploading them.

3

Asymmetric Key Wrapping

Collaborative sharing uses Libsodium asymmetric key exchange. When sharing a document, your document key is securely encrypted using the recipient's public key.

Live Key Derivation
User Master Passwordpbkdf2_derive(...)
Master Identity Key (MIK)Wrapping Key (256-bit)
Encrypted Workspace/Doc KeysStored on Cloud (Wrapped)

Frequently Asked Questions

Docs Logo

Ready to secure your docs?

Create an account or start immediately. Protect your thoughts, documentation, code specs, and tasks behind bulletproof browser-level E2EE keys.