Documentation

1. Create an account - Sign up using Google or GitHub OAuth
2. Create your first memo - Click "New Memo" on the dashboard
3. Set an encryption password - Choose a strong, unique password
4. Save your memo - Your content is encrypted before leaving your device

Zero-Knowledge Architecture

SecureVault employs a zero-knowledge security model. This means:

• All encryption/decryption happens in your browser
• Your password never leaves your device
• We only store encrypted ciphertext
• Even with full database access, your data is unreadable

AES-256-GCM

We use AES-256-GCM (Galois/Counter Mode) for all encryption:

• Key Derivation: PBKDF2 with 100,000 iterations
• IV: Randomly generated 12-byte IV per encryption
• Authentication: GCM provides built-in authentication
• Salt: Unique 16-byte salt per memo

Data Format

{
  "salt": "base64-encoded-salt",
  "iv": "base64-encoded-iv",
  "ciphertext": "base64-encoded-encrypted-data",
  "version": 1
}

SecureVault provides a REST API for programmatic access. All API requests require authentication via Bearer token.

Endpoints