Secure Note Vault
Write encrypted notes that are AES-256-GCM encrypted in your browser before being stored. Set a passphrase to encrypt and decrypt. Notes are stored as encrypted ciphertext in localStorage - nothing is sent anywhere.
Write encrypted notes that are AES-256-GCM encrypted in your browser before being stored. Set a passphrase to encrypt and decrypt. Notes are stored as encrypted ciphertext in localStorage. All encryption and decryption happens locally - nothing is sent anywhere.
Vault Locked
Enter your passphrase to unlock and decrypt your notes. Notes are encrypted with AES-256-GCM using PBKDF2 key derivation (600,000 iterations).
No notes found. Once unlocked, you can create new encrypted notes. Remember your passphrase - if you lose it, your notes cannot be recovered.
All data is encrypted and stored locally in your browser. Nothing is sent to any server.
AES-256-GCM Encryption
Military-grade encryption using the Web Crypto API. Each note is encrypted with a unique salt and initialization vector (IV) before being stored.
PBKDF2 Key Derivation
Your passphrase is strengthened with PBKDF2 (600,000 iterations, SHA-256) to derive a 256-bit encryption key. Brute-force resistant.
Zero-Knowledge Architecture
Your passphrase and decrypted content never leave your browser session. Only encrypted ciphertext is stored in localStorage.
Full Note Management
Create, read, update, and delete encrypted notes. Search through decrypted content, copy to clipboard, and manage your secure vault with ease.
Store API Keys & Secrets
Keep your API keys, database passwords, and service tokens encrypted in one place. Access them when needed with your passphrase.
Recovery Codes Backup
Securely store 2FA recovery codes, seed phrases, and backup codes for your accounts. Encrypted so only you can read them.
Personal Journal Entries
Keep a private journal or diary with sensitive entries. AES-256-GCM encryption ensures your thoughts remain confidential.
Sensitive Document Notes
Record passport numbers, social security info, or medical details in encrypted notes for quick reference when needed.
Server & Infrastructure Credentials
Store SSH keys, server IP addresses, and infrastructure credentials securely. Encrypt before storing, decrypt when needed.
Private Contact Information
Keep encrypted notes about personal contacts, meeting notes, or confidential correspondence that should remain private.
Related Tools
Voice Recorder & Audio Extractor
Record high-quality audio from your microphone or extract audio from MP4 and WebM video files offline. 100% secure, browser-based utility.
Audio Slicer & Converter
Trim audio clips and convert between MP3, WAV format client-side - Free online audio cutter
ID3 Tag & Metadata Editor
Read and write ID3 tags, album art, artist, and track details directly to MP3 file headers - Free online ID3 tag editor
MP3 Metadata Viewer
View all ID3 tags - title, artist, album, artwork, BPM, and every embedded frame - from any MP3 file instantly in your browser - Free online MP3 metadata viewer
Frequently Asked Questions
Is my data really encrypted?
Yes. All notes are encrypted with AES-256-GCM (Advanced Encryption Standard in Galois/Counter Mode) before being stored in localStorage. The encryption key is derived from your passphrase using PBKDF2 with 600,000 iterations. Without your passphrase, the ciphertext is unreadable.
Where are my notes stored?
Notes are stored as encrypted ciphertext in your browser's localStorage. This means they persist across sessions on the same browser but are not synced to any server or cloud. Clearing your browser data will delete all stored notes.
Is the Web Crypto API secure?
Yes. The Web Crypto API is a W3C standard implemented by all major browsers. It provides access to hardware-accelerated cryptographic primitives (AES, PBKDF2, SHA) that run in a secure environment separate from your JavaScript runtime. It is the same technology used by password managers like Bitwarden and 1Password in their web-based offerings.
Can I recover my notes if I forget my passphrase?
No. Your passphrase is the only way to derive the encryption key. The passphrase is never stored anywhere - neither in localStorage nor sent to any server. There are no backdoors, password reset mechanisms, or recovery options. We strongly recommend storing your passphrase in a password manager.
How many notes can I store?
There is no hard limit on the number of notes. However, localStorage typically has a 5-10 MB limit per domain. Each encrypted note stores the ciphertext, IV, salt, and metadata. For average text notes, this allows hundreds of notes before reaching the limit.
Can I use the same passphrase as other accounts?
We recommend using a unique, strong passphrase for this vault that you do not use elsewhere. Since the encryption is local and offline, a passphrase compromise is less likely, but using unique passwords for different services is always a good security practice.
Does this tool work offline?
Yes. Once the page is loaded, all encryption, decryption, and storage operations happen entirely in your browser. No internet connection is required to create, view, or edit your encrypted notes.
What happens if I clear my browser data?
Clearing your browser data (cookies, cache, localStorage) will permanently delete all stored encrypted notes. We recommend exporting important notes or storing backups of your passphrase independently.