cipher · VAULT

offline · no server · nothing uploaded

offline encryptor

Message

Passphrase

Keyfile — optional second factor (any file; decrypting needs the exact same file)

🛡 Add a deniable decoy (optional)

Under coercion, you can hand over the decoy passphrase: it reveals only the decoy text below. The ciphertext is padded so it can't be told whether a hidden message exists.

Decoy passphrase Decoy message (the harmless one)

AES-256-GCM · key stretched with PBKDF2-SHA256 (250k iterations). Strength depends entirely on your passphrase — a weak one can be brute-forced offline.

PANDA//VAULT · cipher ← back to vault