Launch First public script on 31 December 2026 — more TRS tools on the way. Telegram
TRS Infinity
trsinfinity.ink Telegram
Encryption — soon More tools — soon

Next from TRS Infinity

Encryption App

Encrypt files on your machine, keep keys in a local vault and hand off encrypted payloads to clients without exposing plain text. No cloud upload, no account required.

Desktop app with a built-in secure terminal, local vault, and trs-enc CLI — everything below matches the shipped product.

In development Follow announcements
TRS.app · secure terminal + vault
01

Local by default

Encryption runs on your machine. Source files and keys are never uploaded to TRS servers.

02

TRS cipher

Files are sealed as .trsenc with the proprietary TRS cipher (v4). Legacy .trs files still decrypt.

03

Key vault

Generate, label and rotate keys. Export a public key for recipients without exposing private material.

04

Share safely

Export .trsshare bundles with a passphrase or a recipient key — hand off without plain text.

TRS Encryption · v1.1

Full product guide

TRS Encryption is a macOS desktop app with a built-in terminal. All commands below are available in the app or via the bundled trs-enc CLI.

Overview

Two ways to encrypt: a per-file password (no vault needed), or a vault key after unlocking the local vault. Decrypt picks the right key automatically when the vault is open.

  • Desktop app — secure terminal + vault gate at launch
  • trs-enc — full CLI (vault, keys, share bundles)
  • Per-file password or vault keys — your choice
  • All data stays on your Mac — no cloud, no account

Install

macOS

open TRS.dmg
# Drag TRS to Applications, then launch:
open -a TRS

trs-enc is bundled inside TRS.app (Contents/MacOS/trs-enc).

Vault

On first launch the app asks you to create or unlock a vault. Master password must be 12+ characters. A 20-word recovery phrase is shown once — save it offline.

In-app terminal

vault status                  # path, lock state, key count
vault ls                      # files stored inside vault
vault import "contract.pdf"   # copy into encrypted vault storage
vault export contract.pdf     # decrypt back to disk
vault export contract.pdf -o ~/Desktop/out.pdf
lock                          # require master password again
vault reset DELETE VAULT        # destroy vault (irreversible)

trs-enc

trs-enc vault unlock
trs-enc vault lock
trs-enc vault status

Create the vault in the app first — CLI unlocks an existing vault only.

Terminal (in-app shell)

After unlocking, type commands at the trs:~$ prompt. Use quotes for paths with spaces.

Encrypt & decrypt

encrypt "photo.jpg" -p my-secret
encrypt -k default "photo.jpg"          # vault key, no file password
decrypt "photo.jpg.trsenc" -p my-secret
decrypt "photo.jpg.trsenc"              # vault picks key when unlocked

encrypt "photo.jpg" -o ~/Desktop/out.trsenc
decrypt "photo.jpg.trsenc" -o ~/Desktop/photo.jpg

Navigation & session

help
ls
cd ~/Downloads
pwd
status
cipher                        # cipher module status
about
clear
exit

trs-enc CLI

Bundled with TRS.app. Vault must be unlocked first.

trs-enc encrypt photo.jpg --key default
trs-enc encrypt ./docs --key default --recursive --out ~/Desktop/exports
trs-enc decrypt photo.jpg.trsenc --out ~/Desktop/exports

trs-enc keys create --label "Client Acme"
trs-enc keys list
trs-enc keys rotate --label default
trs-enc keys export --label default --public
trs-enc keys import recipient.trskey

trs-enc share photo.jpg.trsenc --passphrase
trs-enc share photo.jpg.trsenc --to recipient.trskey --from-key default

Set TRS_VAULT_PASSWORD to skip the unlock prompt in scripts.

Keys

Keys are named encryption secrets inside the vault — not the master password. A default key is created on first vault setup. 

keys                          # what keys are + quick guide
keys list
keys create "Project Alpha"
keys rotate default
keys export default             # public .trskey for recipients
keys import partner.trskey

Share

Export encrypted payloads as .trsshare bundles — passphrase or recipient public key.

share passphrase "file.trsenc" -p share-secret
share recipient "file.trsenc" partner.trskey

CLI equivalent: trs-enc share … --passphrase or --to recipient.trskey

File formats

  • .trsenc — encrypted file (current default output)
  • .trs — legacy extension (still decrypts)
  • .trskey — exported public key for a recipient
  • .trsshare — share bundle (passphrase or key-based)

Storage

Default locations on macOS:

~/Library/Application Support/TRS Encryption/vault/
~/Library/Application Support/TRS Encryption/exports/
~/Library/Application Support/TRS Encryption/public-keys/
~/Library/Application Support/TRS Encryption/logs/

Legacy vault at ~/.trs-vault is migrated automatically on first run.

Troubleshooting

  • Vault locked — unlock at launch or run trs-enc vault unlock
  • File not found on Desktop — use «Browse file» in the toolbar or grant TRS Files and Folders access in System Settings
  • Wrong password — per-file password vs vault master password are different things
  • Already encrypted — decrypt first, then encrypt again
  • Forgot master password — use the 20-word recovery phrase, or vault reset DELETE VAULT to start over (data inside vault is lost)

Questions about TRS Encryption?

Uptime monitoring and site checks live in the separate Documentation for ./trs.sh.

hello@trsinfinity.ink