signup / choose account mode

Choose a door

Private accounts encrypt Drive content before it reaches the coordinator. Standard accounts use the existing hosted sign-in path.

Door A · Private / E2EE

OPAQUE password login, a mandatory recovery key, and client-held scope recipients. The server stores the OPAQUE record and public recovery recipient only.

Create private account

Door B · Standard

Hosted Clerk sign-in for the standard, non-E2EE account mode.

Continue with standard sign-in