Runs in your browser · nothing uploaded

A Private, Encrypted Notes Vault — In Your Browser

Keep private notes encrypted with a master password, stored only on your device. The master password derives an AES-256-GCM key and is never stored. 100% client-side. SealBox Pro.

Loading tool…

More tools

All free, all private — everything runs in your browser.

Text

Text Encryptor

Turn any message into a shareable encrypted string and back. AES-256-GCM with PBKDF2 key derivation, performed locally by your browser. No upload, free.

Files

File Encryptor

Password-protect any file before you email or share it. AES-256-GCM with a PBKDF2-derived key, performed locally by your browser — no upload, no signup. Free.

FilesPro

Bulk File Encryptor

Batch-encrypt many files with a single password into one downloadable .sealbox archive, and restore them all at once. AES-256-GCM per file, performed locally — no upload. SealBox Pro.

Keys

AES Encryption Tool

Encrypt or decrypt with your own AES-128/256 key and IV in GCM or CBC mode. A raw, explicit bench for learning and development — runs entirely in your browser.

Keys

RSA Keypair Generator

Generate an RSA-OAEP keypair in your browser and export the public and private keys as PEM files. 2048, 3072, or 4096 bits. No upload, no server, free.

Keys

PBKDF2 Key Deriver

Derive a cryptographic key from a password with PBKDF2-HMAC-SHA256. Tunable iterations, random or custom salt, hex or base64 output. Runs in your browser.

How to use Encrypted Notes Vault

  1. 1Create a master password for the vault. It derives the encryption key and is never stored or recoverable.
  2. 2Write a note (title + body). It is encrypted with AES-256-GCM and saved to your device's IndexedDB.
  3. 3Search, open, edit, or delete notes while the vault is unlocked.
  4. 4Lock the vault when you are done — the key leaves memory immediately.
  5. 5A forgotten master password is unrecoverable by design, so keep it somewhere safe.

Encrypted Notes Vault FAQ

Where are my notes stored?
Only on your device, in your browser's IndexedDB, encrypted with AES-256-GCM. They never leave your browser — there is no server and no network request. The master password derives the encryption key via PBKDF2-SHA256 and is never stored; it exists only in memory while the vault is unlocked.
What happens if I forget the master password?
The notes cannot be recovered — by design. The key is derived from your master password and never stored anywhere, so there is no reset link and no backup. Treat the master password like the key to a safe and keep a copy somewhere secure.
Is the notes vault a Pro feature?
Yes. The encrypted-notes vault is part of SealBox Pro, alongside bulk file encryption and custom presets. The free file and text encryptors remain fully usable without a license.