Uploading to Decentralized Storage
When you upload a file and select decentralized storage with encryption:1
File encryption
Your file is encrypted on your device before leaving your browser
2
Specify access rules
You specify access rules (or accept defaults for your workspace)
3
Upload to Walrus
The encrypted file is uploaded to Walrus and distributed across storage nodes
4
Store file reference
Zark stores the file reference so you can access it from your workspace
Accessing Encrypted Files
When you or an authorized team member opens an encrypted file, Zark handles the decryption workflow automatically:1
Retrieve encrypted file
Zark retrieves the encrypted file from Walrus’s storage network
2
Request decryption keys
Your browser contacts Seal’s key servers requesting decryption keys
3
Verify identity and policy
Key servers verify your identity and check the access policy
4
Release decryption keys
If authorized, key servers release decryption keys
5
Local decryption
Your browser decrypts the content locally
Sharing and Collaboration
Sharing encrypted files requires granting access through Seal. When you share a file with a colleague, Zark updates the access policy to include them. They can then request decryption, and the system verifies their authorization before releasing keys. You can also revoke access at any time. When you remove someone from an access policy, the system will no longer release decryption keys to them, even if they previously had access. Without the keys, the stored data cannot be decrypted. See Security, Encryption & Access Control for details on access control.Storage Options in Zark
When uploading files through Zark, you can choose between:- Standard cloud storage for everyday working files
- Walrus decentralized storage for enhanced resilience and ownership
- Walrus with Seal encryption for sensitive data requiring access control