Your vault is empty. Add notes, files, or videos to get started.
Add Item
Item
Processing...
User Guide
!!
Critical: Remember Your Password
Your master password is the only way to access your data. This app uses military-grade encryption — there is no password recovery, no reset option, no backdoor.
If you lose your password, your data is permanently gone.
You MUST store your password outside this app:
Write it on paper and keep it in a physically secure location (e.g. a locked drawer, a safe, or with your important documents)
Store it in a separate, trusted password manager on a different device
Give a sealed copy to a trusted person for safekeeping
Do NOT:
Store it in a text file, note, or photo on the same device
Save it in your browser's autofill or saved passwords
Send it to yourself via email, SMS, or chat
Rely solely on your memory — have at least one physical backup
1. What is Secure Vault?
Secure Vault is a 100% client-side encrypted storage app that runs entirely in your browser. It lets you securely store:
Notes — private text entries (passwords, journal entries, sensitive info)
Files — images, documents, PDFs, or any file type
Videos — personal video files stored encrypted
Everything is encrypted with AES-256-GCM encryption before being stored. No data ever leaves your device. There is no server, no cloud, no account — just you and your password.
2. Getting Started
First time:
Open the app. You will see the "Create your master password" screen.
Choose a strong password (minimum 12 characters). The strength meter will guide you — aim for "Strong".
Write this password down and store it in a safe place OUTSIDE your device (see the warning above).
Confirm your password and tap "Create Vault".
Your vault is now ready to use.
Returning:
Open the app. You will see the unlock screen.
Enter your master password and tap "Unlock Vault".
Password tips: Use a mix of uppercase, lowercase, numbers, and symbols. A passphrase like "Correct-Horse-Battery-Staple-42!" is both strong and memorable.
3. Adding Items
Tap the "+ Add" button on the vault dashboard.
Enter a title for your item.
Select the type:
Note: Type or paste text in the content area.
File: Tap "Select File" to pick any file from your device.
Video: Tap "Select File" to pick a video file.
Tap "Encrypt & Save". The item will be encrypted and stored locally.
4. Viewing & Downloading Items
Tap any item in the list to decrypt and view it.
Notes are displayed as text. Images are displayed inline. Videos play in an embedded player.
For files and videos, a "Download" button lets you save the decrypted file to your device.
To delete an item, tap "Delete" at the bottom of the view screen. This is permanent.
5. Export & Import (Backups)
Export:
Tap "Export" in the header. A .json backup file is downloaded.
This file contains your data still encrypted. It is safe to store on a USB drive, cloud storage, or another device.
You need your master password to import it back.
Import:
Tap "Import" in the header and select a previously exported file.
The app will verify your password can decrypt the data.
Warning: Importing replaces all current vault data.
Recommendation: Export a backup regularly and store it somewhere safe (USB drive, external disk). If your browser data is cleared, your vault will be lost unless you have a backup.
6. Security & Privacy
Encryption: AES-256-GCM — the same standard used by governments and financial institutions.
Key derivation: PBKDF2 with 100,000 iterations — makes brute-force attacks extremely slow.
Zero-knowledge: Your password is never stored. Only a cryptographic hash is kept to verify it.
Client-side only: No data is sent anywhere. Everything stays in your browser's local storage (IndexedDB).
No tracking: No analytics, no cookies, no third-party code.
Content Security Policy: The app blocks all external scripts and resources.
7. Auto-Lock & Locking
The vault automatically locks after 5 minutes of inactivity to protect your data if you walk away.
Tap "Lock" in the header to manually lock the vault at any time.
Closing the browser tab also locks the vault immediately.
When locked, the encryption key is erased from memory — your data can only be accessed by entering the password again.
8. Installing as an App
Secure Vault is a Progressive Web App (PWA). You can install it on your device for quick access:
Chrome / Edge (Desktop): Click the install icon in the address bar, or go to Menu → "Install Secure Vault".
Chrome (Android): Tap Menu (three dots) → "Add to Home screen" or "Install app".
Safari (iPhone/iPad): Tap the Share button → "Add to Home Screen".
Once installed, the app works offline and opens like a native app.
9. Limitations & Tips
File size limit: Individual files are limited to 500 MB maximum. Files over 100 MB will show a warning, as they require significant memory to encrypt. On mobile devices, keep files under 100 MB for best results.
Total storage: Browser storage varies by device (typically several hundred MB to a few GB for the entire vault).
Browser data clearing: If you clear your browser data (cookies, site data), your vault will be deleted. Always keep an exported backup.
No password recovery: This is by design. There is no way to recover data without the password.
One vault per browser: Each browser profile has its own independent vault.
Updates: When a new version is available, a banner will appear at the bottom. Tap "Update Now" to refresh.
10. Frequently Asked Questions
Q: I forgot my password. Can you help me recover my data?
No. The encryption is designed so that only your password can unlock the data. Without it, recovery is mathematically impossible. This is why storing your password safely outside the app is essential.
Q: Is my data uploaded to any server?
No. Secure Vault is 100% client-side. Your data never leaves your device unless you explicitly export it.
Q: Can I use the same vault on multiple devices?
Not automatically. You can use Export on one device and Import on another. Both devices must use the same master password.
Q: What happens if I clear my browser data?
Your vault will be permanently deleted. Always keep an exported backup file stored safely.
Q: Can someone access my data if they steal my device?
Not without your master password. The data in the browser is encrypted. However, using a strong device password/PIN and enabling device encryption adds an extra layer of protection.
Q: How do I change my master password?
Currently, you would need to export your vault, clear all data (or use a new browser), set up a new password, and import your backup. A password change feature may be added in a future version.
Remember: Your master password is the key to everything. Write it down. Store it safely. Keep it OFF your device. No one can help you recover it.