Help — Navigator App
The Navigator App
The Navigator is the only client software for FGSP. All cryptographic operations happen inside it, on your device. Nothing sensitive ever leaves the app.
Not available yet
The Navigator app is in development. This documentation describes how it will work.
Join the waitlist to be notified when early access opens.
What the Navigator does
The Navigator is a local application that holds nothing between sessions. Every time you open it, it starts fresh. When you close it, your credentials are gone from memory. Nothing about your session persists on disk. The app computes your access credentials from your inputs, connects to your storage over Tor, and gives you access to your files. Close it and there's nothing to recover.
Getting the Navigator
The Navigator binary is publicly available with no authentication required. The same binary is distributed to everyone. Verify the signature against the operator's release key before running — instructions are included in the download.
Download page →
Verify the signature
Every Navigator release is signed. Verifying the signature confirms the binary is from FGSP and has not been tampered with. Do not skip this step if you're using FGSP for high-stakes material.
Run it — no installation required
The Navigator is a standalone binary. No installer. No system-wide installation. Run it from wherever you put it. For maximum operational security, run it from a USB drive or from a Tails session.
First use — provisioning
Your first session requires a provisioning token from the operator. This is how your storage bulb is allocated. After provisioning, you never interact with the operator again — all subsequent access is directly between your Navigator and your bulb over Tor.
Enter your provisioning token
Provided when you sign up. One-time use. After the provisioning session, it's consumed and cannot be reused. The operator drops all association between the token and your bulb after provisioning completes.
Choose your Coordinate and Shape Key — or let the Navigator generate them
You can supply your own keys or have the Navigator generate cryptographically random ones. If generated, write them down immediately before proceeding. The Navigator will not show them again after this screen.
Write down your keys before continuing
Seriously. Do not proceed until your keys are written down in at least two secure locations. Once you close the provisioning screen, your keys exist only where you've stored them. The Navigator holds nothing.
Provision Drive A (recommended)
After provisioning, create a Drive A bundle. This is your hot-path access token for regular use. Store it separately from your device.
Regular use
With Drive A (Path 2)
Insert Drive A, open the Navigator, select Path 2. The bundle loads the hot-path token automatically. Connected in seconds without typing your keys. Configure scope at provision time: upload-only, download-only, or both.
Without Drive A (Path 1)
Open the Navigator, select Path 1, type your Coordinate and Shape Key. The Navigator computes everything from your inputs and connects. Same access, slightly slower. Always available — no physical dependency.