Encrypt Files in Your Browser — Secvant Vault | AES-256
Security<br>Clear session
100% client-side
Zero uploads
AES-256-GCM
1 File
2 Settings
3 Encrypt
4 Download
Drop a file here or browse
No file selected
Security profile
Standard<br>AES-256-GCM · PBKDF2 600k
Maximum<br>AES-256-GCM · Argon2id
Custom<br>Advanced parameters
Advanced
Key derivation
PBKDF2-SHA256<br>Argon2id
PBKDF2 iterations<br>600000
Argon2id time cost
Memory (MiB)
Parallelism
Higher memory and time slow down guessing attacks but take longer on this device.
Chunk size<br>4 MiB
Hide original filename in vault metadata
Credentials
Secret type
Passphrase<br>Password or passphrase only
Key file<br>Binary secret file (min 16 bytes)
Passphrase + key file<br>Both required to decrypt
Passphrase
Strength
Key file
Drop key file or browse
No key file selected
Optional hint (stored unencrypted)
Encrypt & download .vault
1 Vault file
2 Review
3 Decrypt
4 Download
Drop a .vault file or browse
No file selected
Vault details
Credentials
Passphrase
Key file
Drop the same key file or browse
No key file selected
Decrypt & download
Security specification
Close
All cryptography runs in your browser via the Web Crypto API. Secvant never receives your files or passphrases.
CipherAES-256-GCM (12-byte nonce, 128-bit tag)<br>Key derivationPBKDF2-SHA256 or Argon2id → 256-bit key<br>ContainerSecvant Vault v1 (.vault)<br>NetworkNo outbound requests during encrypt/decrypt
Full security documentation
Done
Learn
Guides from Secvant — no signup, read in your browser.
What is a .vault file?
Argon2id explained
Key files and dual secrets
Backing up .vault files
All articles
© 2026 Secvant. All rights reserved.
Vault and Pass run in your browser. We do not receive your files, passwords, or passphrases.
We use optional analytics cookies to understand visitor traffic. Vault and Pass never send your files or passwords to us.<br>Privacy policy
Essential only<br>Allow analytics