Authenticated encryption
AES-256-GCM detects incorrect passphrases and modified encrypted data.
Workspace
Overview
Private by design
Encrypt what matters.
Encrypt what matters.
Keep the key to yourself.
Text, documents, images, audio, and video are encrypted inside your browser. Nothing is sent to a server.
Passphrases are never stored
If a passphrase is lost, the encrypted content cannot be recovered.
Text encryption
Encrypt a message or restore an encrypted Secure Vault package.
02
Encrypted package
Copy or download the result.
02
Decrypted message
The plaintext exists only in this browser tab.
Files & media
Protect any document or media file without uploading it.
Compatibility note
New files use a unique random salt and authenticated header. The old app’s .encrypted PDF format can still be opened, but the original file name and type were not stored, so it will download as a PDF.
Saved items
Encrypted notes stored only in this browser.
No encrypted notes yet
Create a note or import an encrypted text package.
Settings
Appearance, security defaults, and local data.
Appearance
Choose the interface theme for this device.
Key derivation strength
Higher values resist password guessing but take longer.
Clear local saved items
Permanently removes encrypted notes stored by this browser.
Security boundary
This tool protects exported or stored content at rest. It cannot protect plaintext from malware, browser extensions, clipboard history, screenshots, or someone with access while your device is unlocked.