security

The .beanpod File Explained

Your entire family's data in one encrypted file. Understand the v4 file format and what's inside.

by greg 4 min read

What is a .beanpod file?

A .beanpod file is the single encrypted file that contains all of your family's data. It uses the v4.0 file format with per-member key wrapping.

File structure

Inside a .beanpod file (JSON):

  • version — File format version ("4.0")
  • familyId — Unique identifier for your family
  • familyName — Your family's display name
  • keyId — Key rotation identifier
  • wrappedKeys — Per-member wrapped copies of the family key
  • passkeyWrappedKeys — Per-passkey wrapped copies (for biometric login)
  • inviteKeys — Active invite link packages (24-hour expiry)
  • encryptedPayload — Your actual data: IV + AES-GCM encrypted Automerge binary
🔑 Per-member keys

Each family member has their own wrapped copy of the family key, derived from their password. This means members can change their passwords independently without re-encrypting the entire file.

Where is it stored?

By default, your pod data lives in IndexedDB (an encrypted cache in your browser). If you connect Google Drive, the .beanpod file is also saved there — but always encrypted before upload.