Nothing you write ever leaves the device.

Vault is a notes app that encrypts every note with AES-256 inside the browser, before it ever touches storage. No account, no server, no sync, so there's nothing to breach.

Get the APK → View source
AES-256-GCM encryption PBKDF2 key derivation WebCrypto native API 0 network permissions
How it locks

One password, derived into a key, never stored anywhere.

Every step happens on your phone. There's no round trip to a server at any point in this chain.

01
You set a password
02
A key is derived
03
Notes are sealed
04
Ciphertext is stored
Built to disappear

Fewer moving parts, fewer ways in.

No internet permission
Screenshots blocked
Encryption in the browser
Open source
Inside the vault

Three screens. That's the whole app.

VAULT
Unlock
VAULT
ENCRYPTED
Your notes
Write & save
Under the hood

The specifics, plainly stated.

EncryptionAES-256-GCM
Key derivationPBKDF2, unique salt per vault
StorageOn-device local storage only, nothing leaves the phone
Network permissionNone requested, none granted
Screenshot protectionFLAG_SECURE (blocks screenshots and screen recording)
Minimum Android version8.0 (API 26)
RequirementsStandard Android WebView, nothing else