Everything You Need to Know

VQPro uses AES-256-GCM encryption combined with ML-KEM-768 post-quantum hybrid key encapsulation. AES-256 has no known practical attack — the best known brute-force attack against AES-256 would require more energy than exists in the observable universe. ML-KEM is the NIST-standardised post-quantum algorithm designed specifically to resist attacks from quantum computers.

Additionally, VQPro is hardware-bound — the encrypted files are useless without the specific machine they were created on. Even if an agency obtained your physical files, they would also need your specific hardware AND your password simultaneously. There is no backdoor, no master key, and no vendor access. Mathematically and architecturally, VQPro is as secure as it is possible to be with current cryptographic science.

VQPro uses Argon2id key derivation — a memory-hard function that makes each password attempt deliberately slow and expensive. On modern hardware, an attacker can attempt roughly 1–10 guesses per second at high cost. A 12-character random password would take longer than the age of the universe to crack this way.

Beyond that, VQPro's progressive lockout activates after failed attempts — locking the interface and triggering escalating delays. The Staged Self-Destruct can be configured to wipe the vault entirely after a set number of failed attempts. An attacker who tries to brute-force VQPro is not just slow — they risk triggering total data destruction.

No. VQPro is entirely offline. It makes zero network connections during operation. There is no telemetry, no analytics, no cloud sync, no licence phone-home, and no external key servers. Your vault data never leaves your machine — not during creation, not during operation, not during backup.

The only internet interaction VQPro has is during the initial purchase (handled by Stripe) and the download. After installation, VQPro requires no internet connection whatsoever and can be used entirely air-gapped.

Conventional encryption (RSA, ECC) relies on mathematical problems that classical computers cannot solve in a practical timeframe. Quantum computers, once sufficiently powerful, could break RSA and ECC encryption using Shor's algorithm — potentially making today's encrypted data vulnerable.

VQPro's ML-KEM-768 (formerly Kyber) is the NIST-standardised post-quantum key encapsulation mechanism — specifically designed to be resistant to attacks from both classical and quantum computers. This means data encrypted by VQPro today remains secure even when large-scale quantum computers become available. No mainstream commercial vault currently offers this protection.

Hardware binding means VQPro cryptographically fuses your vault's master key to your specific machine using a fingerprint derived from your CPU serial number, motherboard UUID, and TPM 2.0 chip. The vault encryption is then wrapped with this hardware-derived key — meaning the same encrypted files on a different machine are completely undecryptable, even with the correct password.

Moving your vault to a new machine requires a deliberate rebind procedure performed with your password and your original vault files. This is not an obstacle to legitimate use — it is a fundamental security layer that means stolen files are useless. See the Operating Guide for rebind instructions.

The Honeypot Decoy Gate presents an attacker with a convincing fake vault when they enter an incorrect password. Instead of showing an error, VQPro displays a plausible-looking empty vault interface — luring the attacker into believing they've gained access. In the background, VQPro silently captures a screenshot of the attacker's session, logs their hardware fingerprint and timestamp, and sends an alert to your configured notification address.

The attacker believes they are inside your vault. You receive a silent notification that someone is attempting to access your vault, with evidence of who and when.

Operating System: Windows 10 (64-bit) or Windows 11 (64-bit)

RAM: 4GB minimum, 8GB recommended (Argon2id key derivation is memory-intensive)

Storage: 200MB for VQPro itself, plus space for your vault contents

TPM: TPM 2.0 recommended for full hardware binding (present in all modern Windows PCs)

Internet: Not required after installation. VQPro is fully offline.

After downloading VQPro_Setup.zip, right-click it and choose Extract All. Open the extracted VQPro folder and double-click VQPro.exe - the application with the VQPro logo/icon. Do not move the EXE by itself.

Open the extracted VQPro folder and double-click VQPro.exe. If Windows SmartScreen appears, only continue if you downloaded VQPro from the official viperqpro.com purchase/download page. Click More info -> Run anyway. VQPro will initialise on first launch, prompting you to set your master password and configure hardware binding. The entire first-run setup takes approximately 2–3 minutes. See the full Operating Guide for step-by-step instructions.

Open the extracted VQPro folder. Right-click VQPro.exe -> Show more options -> Send to -> Desktop (create shortcut). Move the shortcut only. Do not move VQPro.exe out of the folder.

Use a passphrase of at least 20 characters combining random words, numbers, and symbols. Do not use a password you use anywhere else. Do not use personal information (names, dates, addresses). A strong example: Forge#Titanium9!Cobalt&Summit.

Write your master password down and store it in a physically secure location (safe, safety deposit box). VQPro is zero-knowledge — if you forget your password, nobody can recover your vault. There is no reset, no recovery email, no backdoor. The password is the only key.

The Hidden Volume is a completely invisible secondary vault nested inside your primary vault. It uses a different password to the outer vault and is cryptographically indistinguishable from random data — even to a forensic analyst with your outer vault password.

Under duress — if you are forced to surrender your password — you surrender the outer vault password. The attacker sees your outer vault (which you control). Your real sensitive data sits in the Hidden Volume, unreachable and unprovable. No evidence of its existence can be demonstrated cryptographically. This is called plausible deniability.

Travel Mode allows you to hide selected vaults from VQPro's interface entirely before crossing a border or entering any inspection situation. When activated, those vaults vanish — not just hidden, but completely absent from the UI. No indicator, no trace, no folder names suggesting their existence.

Activate Travel Mode before you travel: Settings → Travel Mode → select which vaults to hide → confirm with your password. At your destination or after inspection, deactivate Travel Mode with your password to restore all hidden vaults. Use whenever crossing borders, during customs inspections, or any situation where device inspection is possible.

Remote Wipe allows you to send an authenticated command from any location that causes your vault to erase itself completely — cryptographic keys shredded, data overwritten with multiple random passes, vault structure dissolved. Even physical possession of the machine after a completed wipe yields nothing recoverable.

Remote Wipe requires your Remote Wipe authentication credential (configured during setup) and a network-accessible trigger endpoint. It is designed for scenarios where your device has been stolen, seized, or lost. Configure it in Settings → Remote Wipe before you need it.

Yes — this is exactly what M-of-N Threshold Authentication (Shamir's Secret Sharing) is designed for. You configure N total keyholders and require M of them to authenticate before the vault opens. Example: 3-of-5 — any 3 of your 5 designated people can open the vault, but no single person can act alone.

Combined with the Dead Man's Switch, this creates a complete inheritance system: if you miss check-ins, your designated recipients are notified automatically, and when M of them authenticate together, the vault is accessible. Configure both under Settings → Dead Man's Switch and Settings → M-of-N Authentication.

$1 Trial: Full access to every feature — all 49 security stages, all 12 Crown Jewels — for 30 days. No feature restrictions. Cancel anytime. If you do not cancel, it converts to the monthly rate.

Monthly $9.95: Ongoing full access. Billed monthly. Cancel anytime — your vault data remains on your machine and accessible until the period expires.

Lifetime $129: One payment, own it forever. All future updates at no additional cost. No ongoing payments, no subscription risk, no price increases. This is the recommended option for anyone who values long-term security.

Your vault data is stored entirely on your machine — VQPro does not host or hold any of your data. Cancelling your subscription means VQPro will enter a read-only or locked state after the period expires, but your vault_data folder remains on your machine untouched.

If you resubscribe or purchase a lifetime licence later, your vault is immediately accessible again with your existing password. Your data is yours — we cannot delete it or hold it hostage.

All payments are processed by Stripe — one of the world's leading payment processors, used by millions of businesses. VQPro never sees, stores, or handles your card details. Stripe handles all payment security, PCI-DSS compliance, and fraud protection.

We keep only the customer email address needed for download access, updates, and support. VQPro does not store card numbers, CVV, bank details, wallet payment details, vault data, passwords, or recovery material.

Yes. Enterprise licensing is available for law firms, accounting practices, medical organisations, defence contractors, and corporate teams. Pricing is based on seat count: 5-seat, 25-seat, 100-seat, and unlimited custom arrangements.

Enterprise licences include priority support, custom deployment assistance, and volume pricing. Contact us at admin@viperqpro.com to discuss your requirements.

If VQPro does not work on your system after following all setup instructions and contacting support, we will issue a full refund within 14 days of purchase. Email admin@viperqpro.com with your purchase email and a clear description of the issue.

Refunds are not available for change-of-mind on lifetime licences where the software has been used. Monthly subscription refunds are handled through the payment provider's standard subscription cancellation process.

VQPro v3.7.1 has 49 security stages. These are independent security checkpoints that every vault operation passes through. They are layered in a walls-within-walls architecture — defeating one stage immediately confronts the attacker with the next.

Stages cover: anti-debugging, process protection, memory hardening, hardware binding, post-quantum key encapsulation, symmetric encryption, key derivation, asymmetric key operations, audit trail signing, two-factor authentication, duress detection, brute-force protection, canary tokens, anti-memory-dump, secure deletion, clipboard protection, screenshot blocking, keylogger shielding, integrity verification, and the 12 Crown Jewel stages (S41–S49 plus three additional). No other commercial vault comes close to this depth.

VQPro v3.7.1 is Windows-only (Windows 10 and 11, 64-bit). This is a deliberate architectural decision — Windows provides the specific hardware APIs (TPM 2.0 via TBS/CNG, WMI hardware fingerprinting) that power VQPro's hardware binding system. Reproducing this depth of hardware integration on Linux and macOS requires platform-specific work.

A cross-platform version is on the development roadmap. An Android companion app is also in development. Notify us at admin@viperqpro.com if Linux or macOS support is a priority for you — this informs our roadmap prioritisation.

VeraCrypt is an excellent open-source disk encryption tool with hidden volume support. However, it has no hardware binding, no post-quantum encryption, no Dead Man's Switch, no Remote Wipe, no SIEM, no Geofencing, no M-of-N, no Travel Mode, no Cascade Cipher, and no Staged Self-Destruct. It has approximately 8 meaningful security layers. VQPro has 49.

1Password is a cloud-based password manager. It stores your data on their servers, uses conventional encryption (no post-quantum), has no hardware binding, no hidden volumes, no kill switch, and requires an internet connection to function. It is fundamentally a different product category.

VQPro is not a better version of either — it is a different class of product: a locally-controlled, hardware-bound, post-quantum encrypted vault with active threat response capabilities that neither competitor offers.

Yes — and you should. Back up your entire vault_data folder regularly to an encrypted external drive or USB. The backup is encrypted — your files are safe even if the backup drive is lost or stolen, because the encryption requires both your password AND your original hardware to decrypt.

Recommended strategy: weekly backup to an encrypted USB kept offline and physically secured. Monthly backup to a second drive stored in a separate physical location. Do not store backups in cloud services — this defeats the zero-cloud security model.

Standard AES-256-GCM applies a single encryption pass with one key. The Cascade Cipher applies three sequential AES-256-GCM encryption passes, each with an independent key derived from the hardware fingerprint, master password, and a unique salt.

To break Cascade Cipher encryption, an attacker must defeat three independent AES-256-GCM passes simultaneously. Breaking the first reveals only the input to the second pass — not your data. All three must be broken in sequence. This is not merely 3× more secure — it is multiplicatively more resistant to any attack that relies on patterns in the ciphertext, since three independent encryptions produce output with no recoverable patterns whatsoever.