# Security and key custody

## Local vault

The local vault is plaintext and owner-only because the agent must be able to resume it.

## Hosted sync

Capsules are encrypted on your machine. By default, the server has no recovery key and cannot decrypt prompts, responses, or file paths. It can see the provider account, agent, random session ID, byte and file counts, and timestamps required to operate the service.

## Key custody

- Default: you hold the key; the server cannot decrypt session contents.
- `unlose key host on` stores the recovery code with the server and allows the operator to decrypt that account.
- `unlose titles on` exposes titles through a separate titles-only key, not the session contents.

## Sharing

Exports and share links are complete recovery copies, not redacted summaries. Anyone with the matching recovery code or complete share link can read that copy.