Secret Vault — Encrypted Diary, Passwords & Files
Free online encrypted vault that runs in your browser via Web Crypto API. Keep a private diary with chapters and mood tracking, manage passwords with a built-in generator, and store sensitive files — all protected by AES-256-GCM encryption.
How to Use
Click "Create New Vault" and optionally set a master password. The vault is encrypted with a site-specific key automatically.
Choose a mode: Diary for journal entries with chapters and moods, Passwords for login credentials, or Files for encrypted document storage.
Add entries, passwords, or files. Everything is encrypted in real-time in your browser.
Click "Save & Download" to save your vault as a.tvlt file. Store it anywhere — it's useless without this site.
To resume, visit this page and open your.tvlt file. Enter your password to unlock and continue.
Encrypt personal notes and attachments with AES-256 right in your browser
Your Secret Vault
Encrypted diary, passwords & files — only accessible here
Remember: your vault only opens on this site. Bookmark it!
Features
Frequently Asked Questions
How secure is the Secret Vault?
The vault uses AES-256-GCM encryption via the browser's native Web Crypto API — the same standard used by banks and governments. Your data is encrypted with a combination of a site-specific key and your optional password. Without both, the file is mathematically impossible to decrypt.
Can I open my vault file on another device?
Yes, as long as you visit this same website. The encryption key is tied to this site — your vault file will work on any device, any browser, as long as you open it here. No app installation required.
What happens if I forget my password?
If you set a password and forget it, the vault cannot be recovered. There is no "forgot password" option — this is by design for maximum security. We recommend keeping a backup of your password in a safe physical location.
What is the decoy password feature?
The decoy password is a second password that opens a fake vault with fake entries. If someone forces you to unlock your vault, you can give them the decoy password — they will see the fake data and have no way to know the real vault exists. This is known as "plausible deniability."
What is the.tvlt file format?
The.tvlt file is a custom binary format containing your encrypted vault data. It starts with "TVLT" magic bytes followed by version info, a random salt, initialization vector, and the AES-256-GCM encrypted payload. Without the correct site key and password, the contents are indistinguishable from random noise.
