Askrypt
Open a vault
Unlock and edit a vault in this browser. The decryption happens on this device, in the page — your answers and your entries are never sent anywhere.
This browser cannot run the Web Cryptography API. That usually means the page was loaded over plain HTTP rather than HTTPS, or the browser is an old one.
Choose a vault
You are not signed in, so there is nothing stored here to list. Sign in to open a vault from your account, or open a file from this device.
A .askrypt file your desktop or mobile app
saved. It is read in the page and never uploaded.
Create a new vault
Choose the questions you will be asked to unlock this vault, and answer each one now. The answers are the key: there is no master password behind them and nothing on this server can recover them.
Answers ignore spaces, dashes and capitals, so type them however you like — but everything else has to match exactly, every time. Pick answers that will not change and that you will not mistype.
Unlock
The rest of your questions
Smart Lock is armed
The entries and the master key are gone from this page. Your answers are still here, held encrypted under one of themselves — so one of them re-opens the vault instead of all of them.
Entries
Nothing matches.
Entry
Save
Saving re-encrypts the whole vault in this page under the same master key and the same answers, then uploads only the encrypted file. A downloaded copy is a new file — a browser cannot write back over the one you picked.
What this page can and cannot promise
The decrypting happens here, in your browser, over the Web Cryptography API. Nothing this page decrypts is sent to the server, stored in the browser, or kept after you lock it.
Smart Lock is the one exception, and only while you have asked for it: it drops the entries and the master key like any other lock, but keeps your answers in the page, encrypted under one of themselves, so that a single answer re-opens the vault. It lasts eight hours at the most, it is gone the moment you lock fully or close the tab, and the automatic locks — the idle timer and the one that fires while this tab sits in the background — keep nothing at all unless the vault was already Smart Locked.
It is still JavaScript that this server sent you, so it cannot offer what the desktop and mobile apps do: there, the code was installed once and the server has no say in it. If that difference matters for your vault, use an app. The four files this page runs are vault-format.js, vault-smartlock.js, vault-passgen.js and vault-open.js, they have no dependencies, and they are meant to be read.