Secure Notes Vault

Secure Notes Vault is a free, zero-knowledge, browser-based encrypted scratchpad and credential vault tailored for private note-taking, secret key storage, and confidential draft writing. Powered by the native Web Crypto API, all data encryption and decryption occurs 100% locally on your device using military-grade AES-256-GCM authenticated encryption with keys derived via PBKDF2 (100,000 rounds of HMAC-SHA-256) and a cryptographically secure 128-bit salt.

No plaintext notes, passwords, or encryption keys ever leave your browser or touch any server. Key features include configurable inactivity auto-lock (10 minutes default), instant panic lock memory purge, self-destructing burn-after-reading notes, one-time shareable encrypted URLs, full Markdown formatting with live split-view, and portable encrypted JSON backup/restore. Take total control of your digital privacy with true zero-knowledge local cryptography.

Create Your Master Password

Choose a Master Password for your vault. Your notes are encrypted client-side using AES-256-GCM before saving.

SET MASTER PASSWORD

Strength: None AES-256-GCM / PBKDF2

PASSWORD HINT (OPTIONAL - STORED LOCALLY)

🛡️ Zero-Knowledge Cryptography Standards & Privacy Architecture

1. How PBKDF2 Key Derivation & AES-256-GCM Protect You ▼

Your Master Password is never used directly as an encryption key. Instead, it is passed through PBKDF2 (Password-Based Key Derivation Function 2) using 100,000 rounds of HMAC-SHA-256 with a cryptographically secure 128-bit random salt. This key is then used with AES-GCM (256-bit), which provides authenticated encryption that prevents both unauthorized eavesdropping and malicious tampering.

2. 100% In-Browser Web Crypto API Execution ▼

All encryption and decryption operations occur entirely within your browser utilizing the hardware-accelerated window.crypto.subtle standard. Plaintext notes, passwords, and encryption keys never touch any server, database, or API.

3. Auto-Lock & RAM Session Purge Protection ▼

When you click "Lock Vault Now" or when the inactivity timer triggers, all decrypted notes, encryption keys, and active buffers are immediately wiped from memory (RAM) and the DOM. Only the encrypted ciphertext remains safely in your local storage.