A strong passphrase is the whole game. Aim for 5+ words or 16+ characters.
Sealed
Write or print this block and hand it over. Useless without the passphrase.
Send the passphrase through a different channel than the block (e.g. block by message, passphrase by phone). Never together.
or drag / click to load a .vault file
How the handover works (split-knowledge):
1 · Enter the details and lock them with a passphrase.
2 · Hand over the encrypted block (paper, message, or .vault file).
3 · Share the passphrase separately, through a different channel.
4 · The recipient opens this same file, pastes block + passphrase → sees the details.
5 · Once access is done, rotate the credentials as good practice.
Under the hood: AES-256-GCM · PBKDF2-SHA256 (300k iterations) · random salt & IV per lock. Everything runs locally via the Web Crypto API — zero network calls.