barqly.com

What It Is

Barqly Vault is an offline-first, open-source desktop file encryption app for encrypting, decrypting, and securely sharing sensitive documents. The page explicitly mentions typical use cases such as Bitcoin wallet descriptors, taproot scripts, and other confidential files, while also emphasizing that it should not be used directly to store Bitcoin private keys or seed phrases.

Core Features and Security Design

In terms of protection, it focuses on file encryption, key management, and public-key-based secure sharing. Its encryption layer uses the age standard with ChaCha20-Poly1305 and X25519, a relatively modern and auditable technical approach. A key highlight is its multi-key model: each vault supports up to 4 keys, which can combine YubiKey and/or passphrases. The YubiKey option can reduce risks from malware, keyloggers, and private key export; passphrase keys are more convenient, but their security depends on the endpoint environment.

Deployment, Management, and Integrations

Barqly Vault is deployed as a local desktop application, supporting macOS, Linux, and Windows. It states that it makes no network calls and that all operations are completed locally, making it suitable for offline backups, USB media, or storing ciphertext in a cloud drive of your choice. Management features include key import/export, backup and recovery in the .agekey.enc format, NIST-style key lifecycle states, multi-device YubiKey detection, disaster recovery mode, and file-hash manifest integrity checks. On the integration side, it mainly supports YubiKey, the age key format, and recipient public-key sharing; there is no visible information about APIs, enterprise directory integration, or SIEM alerting.

Pricing and Support

The main content indicates that the project is open source and provides a Donate entry point. It does not disclose any commercial subscription, enterprise edition, or paid support. Support channels include email, Nostr, X, and GitHub Issues, but the maintainer notes that support is provided personally and as time permits, so it should be regarded as open-source best-effort support.

Pros, Cons, and Best Fit

Its strengths are being offline, local, open source, and cross-platform, with hardware-key support to enhance protection for high-value files. It also supports batch encryption and portable ciphertext output. Its limitations include a lack of compliance certifications, centralized management, audit reports, and formal SLA information, which limits its usefulness in enterprise compliance scenarios. It is better suited to Bitcoin users, Lightning node operators, technical individuals, and small teams for encrypting related descriptors, configuration inventories, node backups, or general sensitive documents.

Access from China

The page does not provide information about availability from mainland China, payment methods, or mirrors, so China access is rated as unknown. If you need to access GitHub or X-based support channels, the actual experience may be affected by the local network environment. Alternative tools include VeraCrypt, Cryptomator, GnuPG, age, and Picocrypt.