Offline
1) Enter data
Large text supported (best effort). Nothing is uploaded.
2) Set passphrase
Recommendation: 12+ characters, unique.
Advanced
Higher is slower but helps resist brute-force attacks.
Both formats remain fully offline. Base64 is the standard
portable blob.
Auto-lock / privacy
0 disables. Best effort: clears fields after no interaction.
3) Encrypt
Output is a versioned envelope (SV1) including KDF params, salt,
IV, ciphertext, and optional metadata. AES-GCM authentication is
built in.
Self-test (encrypt → decrypt roundtrip)
Runs locally in your browser using Web Crypto. No network.