Lockbox

Anyone with the link can read an unlocked note. Anyone with the link and the passphrase can read a locked note. The secret lives only in the URL hash (after #) and is not sent to the server. Do not paste the URL into chat logs, tickets, or analytics.

Compose AES-GCM 256

Title (optional)

Note

Passphrase (optional)

Confirm passphrase

Empty passphrase → a random 256-bit key is embedded in the hash. With a passphrase → PBKDF2-SHA256 (210,000 iterations) + random 16-byte salt; the key is never put in the URL.

Ready 0 characters

100% client-side Web Crypto. The note is not stored in localStorage. Requires a secure context (HTTPS or localhost).