CipherSafe

CipherSafe is a private, offline vault for your notes, files, photos, and videos. Keep sensitive content protected on your device without creating an account or relying on cloud storage. CipherSafe is designed for local privacy: no analytics, no cloud sync, and no network sharing. ### Protect Your Private Content - Create, edit, rename, and delete encrypted notes - Import files of any type - Secure photos and videos in your local vault - Browse and preview supported images - Export a selected file when you choose to use it outside the vault ### Strong Local Encryption Your vault content is encrypted at rest with AES-256-GCM, providing confidentiality and tamper detection. Each encryption operation uses a fresh random nonce. Your PIN is processed with Argon2id, a memory-hard key derivation function designed to make PIN guessing more expensive. CipherSafe also uses a hybrid post-quantum vault-key design: PIN-derived key material is combined with a device-bound ML-KEM-768 shared secret using HKDF-SHA256. This means encrypted vault data alone is not enough to reconstruct the active vault key. ### Signed Encrypted Backups Create portable encrypted backups from Settings. Backups are protected with a separate passphrase and signed using an ML-DSA-65 vault identity. When restoring a backup on a new device or after reinstalling, CipherSafe verifies the signature before restoring your content. You choose a new local PIN, and restored content is protected by a newly created device-bound vault key. ### Security Controls - Optional Duress PIN - Panic Lock to immediately clear the active session key - Automatic locking when the app enters the background - SUPER PANIC to permanently destroy local vault content and keys after confirmation - Vault session keys are held only while the vault is unlocked ### Important - CipherSafe is local-only. It does not provide accounts, cloud sync, or account recovery. - Do not forget your PIN or backup passphrase. There is no recovery path. - Regular file exports are plaintext outside the vault. Use Signed Encrypted Backup for a protected portable copy. - Duress PIN and SUPER PANIC actions are irreversible.