Secret Vault
A private encrypted sanctuary for personal journals, sensitive credentials, voice notes, and confidential memories. Protected by client-side Web Crypto primitives where your keys never leave your machine.
Cryptographic Standards & Features
AES-256-GCM Authenticated Encryption
Industrial-grade symmetric cryptography using PBKDF2-HMAC-SHA256 key derivation with unique random salts (100,000 iterations) and 96-bit initialization vectors for robust replay prevention.
Custom .vault File Export
Export encrypted diaries as portable .vault files. Encapsulates text, photos, and voice notes into an anti-tamper envelope you can safely email, store on USB drives, or back up to cloud drives.
Self-Destruct Breakdown Timers
Set deadlines on ephemeral notes. Cryptographically binds expiration timestamps to the decryption envelope so notes automatically lock permanently once expired.
Voice Memos & Photo Attachments
Record voice audio notes directly from your browser with instant playback and drop in photo attachments. Media files are stored strictly encrypted inside your local vault.
Zero-Knowledge Security Model
How Secret Vault ensures absolute privacy from end to end:
- ✓ Zero network transmission of diary notes
- ✓ Never touches any backend database
- ✓ Passphrase never stored in plaintext
Frequently Asked Questions
What is zero-knowledge client-side encryption?
Zero-knowledge encryption means your notes, voice recordings, and photos are encrypted directly on your device using the browser Web Crypto API (AES-256-GCM) with your master passphrase before any bytes are saved to local IndexedDB or exported to disk. Awesome Crate never receives your key or your data.
What is the .vault document format?
A .vault file is a standalone encrypted binary container engineered by Awesome Crate. It encapsulates rich formatted text, embedded images, voice audio notes, and metadata inside a tamper-proof authenticated payload. Opening the file in a raw text editor shows an explicit security header; only entering the correct password inside Secret Vault can decrypt its contents.
How do breakdown self-destruct timers operate?
When composing a sensitive diary entry, you can configure a self-destruct timer (e.g. 1 hour, 24 hours, 7 days). The expiration deadline is cryptographically embedded within the authenticated additional data (AAD). Once the deadline passes, the client refuses decryption and permanently shreds the key material.
Can I record voice notes and attach photos inside my diary?
Yes. Secret Vault includes in-browser microphone voice note recording (compressed locally with audio encoding) and drag-and-drop photo attachment support. All audio and image data are encrypted together with your text in the same AES envelope.
What happens if I forget my password?
Because encryption is strictly zero-knowledge with no server backdoor or master reset mechanism, a forgotten password cannot be recovered. We recommend keeping your passphrase safely backed up.
Create your first encrypted diary
Set a secure password and start writing in absolute privacy on your device.