Obsydian/Media Vault
Your originals

Somewhere to put it
before anyone has it.

Encrypted storage between your camera roll and the world. Every file lands scrubbed, dated, and provably yours.

Start freeSee pricing
One key per file · none of them written down
Your libraryGoing inProofOn the way outSpace & plansQuestions
01 Once it's in there

Say hello to your private library.

It sorts itself. Day, then shoot.

Albums sit alongside folders. Folders nest 4 deep; a set can be "March balcony" and "Sold to Jay" at once — one copy, two places.
The uploader outlives the page. Drop a set and go answer a message. Each file still lands in the folder you dropped it in.
Move a hundred at once. Click, shift-click a range, then move, rename, watermark or delete the whole lot.
Drag, with an undo. Dropping on the wrong folder is the easiest mistake in any file manager. It's one click back.
Rename a shoot in one go. A base name and a starting number, and the set comes out in order — not forty files called IMG_4471.
Sort 10 ways. Date added, date taken, name, size or type — each one reversible, so largest first and smallest first are both a click away. Date taken comes off the camera, not off the upload, so a shoot lands in the order you shot it.
02 What happens to a file

Stripped, fingerprinted, encrypted, locked.

Every photo carries where it was taken, on what, and when. That rides along wherever you send it. The vault takes it out first, in your browser, before anything uploads.

And you can have it all back.

Taking the metadata off isn't a one-way door. What came out is kept beside the file, so “Download camera original” hands you the shot exactly as your phone wrote it — same bytes, same fingerprint. What you post is clean; what you keep is whole. (Big PNGs and WebPs that hold their metadata at both ends are the exception, and the file says so on its own record.)

And a second lock, if you want one.

Signing in gets you into Obsydian. A passcode, Face ID or an authenticator app gets you into the vault — so an open tab on a borrowed laptop isn't a way in. Off until you turn it on.

It locks the files, not just the page. Thumbnails and downloads are checked on our side too. No way round the screen.
You can't be shut out. Forget the passcode and an emailed code resets the lock. Your evidence is never what you lose.
The part that argues for you

Every file arrives with its receipt.

Ownership record
In your vault since14 March 2026, 21:14
Captured14 March 2026 · iPhone 15 Pro
Size4.8 MB · 4032×3024
Fingerprint ✓ verifiede3b0c44298fc1c149afb…
⊘ Stripped from the file, kept only here. Verified means we pulled the file back out of storage, worked the code out again ourselves, and it matched.
Notice of Copyright Infringement17 U.S.C. § 512

The copyrighted work has been in the complainant's private archive since 14 March 2026, 21:14, under the code e3b0c44298fc1c149afb…

Filled in from the record · you send it, in your name
03 Because it's going somewhere

It leaves as a copy. The original stays put.

Send a file, or a whole selection, to the watermarker and get marked copies back. The vault copy is never overwritten — being the untouched original is its whole job.

A whole set, one pass

Save a mark once, then run it over a whole selection without opening the editor. The copies come back as a zip. Try the free watermarker →

Watch a file Black

Flag the files that matter and Concierge re-checks those on a schedule — not the whole vault. Twenty watched properly beats a thousand watched badly. Check something now, free →

04 The practical questions

How much room, and what if I stop paying.

250GB
on Obsydian Black, 25 GB on Studio. Part of the plan, not an add-on — and not on Free.
0
of your files pass through us. They go from your browser straight into storage. We keep the record, never the picture.
12months
to change your mind. Cancel and the vault turns read-only — still there, still yours. Come back inside that and nothing was lost.

Both plans include the vault and the lock. It's there the moment you're on one — nothing to request. See plans →

Everything else people ask

Short answers, including the awkward one.

Can Obsydian see my files?
Yes, and we won't pretend otherwise. Every file is locked with its own key the storage company never gets, so anyone who steals the storage gets nothing they can open — but the master key is ours. It protects you against someone breaking into the storage, not against someone breaking into us.
You strip my metadata — can I get the original back?
Yes. The metadata comes off in your browser before the file uploads, and what came off is kept beside it, so Download camera original rebuilds the shot exactly as your phone wrote it — same bytes, same fingerprint. The exception is a large PNG or WebP that stores its metadata at both ends of the file; those can not be rebuilt, and the file's own record tells you so rather than leaving you to find out. Everything a phone shoots — JPEG, HEIC, MP4, MOV — is always restorable.
Can my vault be reached by guessing a URL?
No. Stored files have random names and no public address at all. Every view, thumbnail and download runs through a check that the file is yours. There is no link to share, leak or guess.
Does my file go through your server on the way in?
No. The stripping, the fingerprint and the thumbnail all happen in your browser, and the file uploads straight to encrypted storage on a one-time link. Our server only gets the record: name, size, fingerprint and the capture details we pulled out for you.
How does it decide where one shoot ends and the next begins?
By the clock on the files themselves. A gap of more than 30 minutes between one shot and the next starts a new shoot, so a morning set and an evening set land apart without you naming either. Albums are yours to make on top of that.
If I close the tab mid-upload, do I lose the batch?
Closing the tab stops it; moving around Obsydian doesn't. The uploader runs above the whole dashboard, so a set keeps going while you answer a message or edit your page — and each file lands in the folder that was open when you dropped it.
What is the fingerprint actually good for?
It shows the file you hold now is the exact file that sat in your vault on a given date, and anyone can check that for themselves. It doesn't say who owns a picture — it ends the argument over whether it's the same picture.
Does stripping metadata change my photo?
No. The metadata is cut out and the image is copied across untouched — nothing is re-saved, so no quality is lost. If a file isn't shaped the way we expect, it's stored as it came and marked unscrubbed, never passed off as clean.
What if I forget my vault passcode?
You get back in. Ask for a reset and we email a one-time code to your account address; entering it clears the passcode and every saved device and turns the lock off. The lock is a convenience, not a way to lose your own evidence.
What happens to my files if I downgrade or cancel?
The vault goes read-only for 365 days — visible and frozen, not gone. Resubscribe inside that window and you get everything back. After it, the files are deleted for good.
What can I put in it?
Images: JPEG, PNG, WebP, HEIC, HEIF, AVIF, GIF. Video: MP4, MOV, WebM. Up to 1 GB each. Metadata comes out of all of them except GIF and WebM, and the file tells you which it was.
Where do deleted files go?
Trash, for 30 days, then they're gone for good. Worth knowing: a file in Trash still counts against your storage, because it's still there — emptying it is what gives the room back.
Is the vault on the free plan?
No — it's on Studio and Obsydian Black, with more room on Black. Nothing to request and no waitlist: it's there the moment you're on the plan. Concierge leak monitoring is still invite-only, but that's a different product.

Your originals shouldn't live in a camera roll you back up to nowhere.

Start freeSee pricing
Safety controlsFree metadata checkerFree watermarker