Demos

See QNSQY in action

Real screen recordings of the actual tool on Linux, no edits and no fast-forward, each one running the whole operation from an empty screen. Click any clip to play. Want the exact commands for the desktop app, terminal UI, and command line? Read the complete guide.

Featured

Encrypt a file, start to finish

The same operation, shown two ways, with the file manager open beside it so you can watch the encrypted .qs appear the moment it is written. Pick an interface:

Desktop app

Choose the file and the recipient's public key with the built-in file browser, then click Encrypt. No paths typed by hand. Every panel shows the equivalent command line with a Copy button.

  • Files picked inside the app
  • File manager open on the same folder
  • Output verified to decrypt back to the original

Command line

Generate a key, encrypt, decrypt, and diff, one command at a time. The file manager on the right updates as each file is written.

  • Every command typed in full
  • File manager open on the same folder
  • Ends in a byte-for-byte ROUNDTRIP-OK

Terminal UI clips are in production.
The desktop app and command line are ready above.

Show all in

Encrypt & decrypt

Encrypt to a recipient Lock a file to a recipient's post-quantum public key. The KEM is chosen by the key.
Variant
Hybrid encrypt Encrypt with both a recipient key AND a password, for defense in depth.
Variant
Symmetric encrypt Password-only authenticated encryption, no key files.
Variant
Password encrypt Encrypt a file to a single password, no keypair needed.
Variant
Encryption options Add compression, paranoid padding, an inline signature, or the XChaCha20 cipher.
Variant

Keys & signatures

Generate encryption keys Create a post-quantum KEM keypair (ML-KEM or HQC, hybrid or pure).
Variant
Generate signing keys Create a signing keypair across every ML-DSA, SLH-DSA, FN-DSA, and LMS variant.
Variant
Sign & verify Sign a file and verify it against the public key.
Variant
Import / export keys Import a public key into the keystore and export it by name.
Variant
Verify integrity Detect tampering in a .qs without needing the password.
Variant
Provenance Sign a file with your on-device identity and detect any later tampering.
Variant
Release signatures Sign a release artifact and verify it against the embedded ML-DSA key.
Variant

Advanced encryption

Attribute-based (ABE) Encrypt to an attribute policy so only matching recipients can open it.
Variant
Threshold (M-of-N) Encrypt so any M of N key-holders must cooperate to decrypt.
Variant
Time-lock Encrypt so the file cannot be opened until a set time has elapsed.
Variant
Deniable Two payloads, a real one and a decoy, behind two separate passwords.
Variant
Steganography Hide an encrypted payload inside an image, PDF, or audio carrier.
Variant
Polyglot Embed an encrypted payload in a file that stays a valid PDF, ZIP, or PNG.
Variant

Migration & hygiene

Scan Find quantum-vulnerable crypto (RSA, ECC, old certificates) in a directory.
Variant
Migrate Re-encrypt vulnerable files to post-quantum .qs, with backups.
Variant
Secure delete Overwrite a file in place before removing it so it cannot be recovered.
Variant
Rekey Change a file's password without re-encrypting the underlying data.
Variant
Batch Encrypt or decrypt a whole folder of files in one run.
Variant
Split / combine Split a secret into shares and combine them back.
Variant

Vault, groups & organization

Vault Store secrets behind one Argon2id-protected master password.
Variant
Groups Create and manage recipient groups for threshold encryption.
Variant
Escrow Generate organization escrow keys for key recovery.
Variant
Policy View and set the organization's encryption policy.
Variant
Audit log View and verify the tamper-evident log of operations.
Variant
Remote backup Configure a zero-knowledge S3/R2 destination for encrypted backups.
Variant

Encoding & utilities

Hash Compute a BLAKE3, SHA-2, SHA-3, BLAKE2, or SHAKE digest of any file.
Variant
Encode Convert data to Base64, Hex, Base58, Base32, and more.
Variant
Decode Convert encoded text back to the original bytes.
Variant
Keyfile Encrypt with a 256-bit key file instead of a password.
Variant
Random secret Generate a 32-byte secret from the OS CSPRNG.
Variant
Account & version Check the signed-in account, the tier the billing server returns, and the build's algorithm inventory.
Variant
Decrypt Open an encrypted file with a password, a private key, or both, and show what it was encrypted with.
Variant

Platform notes

What the Windows clips do differently, and where a clip stops short. Each note is what the recordings actually show.