Volume management
Learn how to create, manage, and maintain encrypted volumes in Kurpod. Master both standard and hidden volume operations.
Understanding volumes
Kurpod uses a volume-based encryption system where each volume is an independent encrypted container:
- Standard volume: Your primary encrypted storage
- Hidden volume: Optional secondary storage for plausible deniability
- Blob file: Physical file containing one or both volumes
Volume structure
Blob File
├── Header (512 bytes)
│ ├── Version info
│ ├── Salt for key derivation
│ └── Metadata
├── Standard Volume
│ ├── Encrypted file system
│ ├── File contents
│ └── Free space (random data)
└── Hidden Volume (optional)
├── Overlaps "free space"
├── Independent file system
└── Completely invisible
Creating volumes
Standard volume only
The simplest setup for most users:
- Access Kurpod web interface
- Click "Create New Storage"
- Enter a strong password
- Leave "Enable Hidden Volume" unchecked
- Click "Create"
// API equivalent
POST /api/create
{
"password_standard": "your-secure-password-here",
"enable_hidden": false
}
With hidden volume
For maximum security:
- Access Kurpod web interface
- Click "Create New Storage"
- Enter standard volume password
- Check "Enable Hidden Volume"
- Enter hidden volume password (must be different)
- Click "Create"
Critical: Different passwords
Always use completely different passwords for standard and hidden volumes. Related passwords compromise plausible deniability.
Accessing volumes
Unlock volumes
Password is checked against both volumes. When there is a match, the volume is unlocked. When there is no match, error message.
# Web interface
Navigate to http://localhost:3000
Enter standard password
Click "Unlock"
# API
POST /api/unlock
{
"password": "standard-password"
}
Managing files
File operations
All operations work identically in both volumes:
- Upload: Drag & drop or click upload
- Download: Click to download
- Delete: Right-click → Delete. Note that deleted files are not actually deleted, but rather marked as deleted. They are still accessible until the next compaction. After compaction, they are actually deleted. Compaction is manual and requires both passwords.
- Rename: Right-click → Rename
- Move: Drag to new folder
Volume isolation
Important: Volumes are completely isolated:
- No file sharing between volumes
- No references across volumes
- Independent folder structures
- Separate trash/recycle bins