1
Sign in with email + account password
This only proves who you are to the server and gives you access to your encrypted records. It can be reset by email without touching your data.
Zero-knowledge encrypted vault
Your secrets, encrypted by you. Available everywhere.
Notes, passwords, cards, identities, documents, photos and voice memos, protected with AES-256 before they leave your device. Sign in from any browser with your email and password – and only your vault password can read the data.
- AES-256-GCM, keys derived in your browser
- The server stores ciphertext only
- Same data model as SecurePad Pro for Android
🔒Encrypted in the client
☁️Synced as ciphertext
🔑Only you hold the key
Two passwords, one promise
The account password opens the door. The vault password opens the safe. The server never sees the second one.
2
Unlock with the vault password
In your browser, PBKDF2 (600 000 rounds) turns the vault password into a key that unwraps your 256-bit data key. Nothing of this leaves the page. A recovery key is generated once, for emergencies.
3
Work as usual – everything is sealed on the way out
Every item is encrypted with AES-256-GCM before upload. Attachments are separate encrypted blobs fetched on demand, so the list opens instantly even with gigabytes of media. Items you lock with their own passcodes get a second layer, exactly like on the phone.
Your browser / phone
vault password → key · AES-256-GCM · plaintext lives only here
ciphertext only (TLS)
server.securepad.online
email + password login · stores sealed items and blobs · cannot decrypt anything
Everything from SecurePad Pro
The web edition is the Pro edition: no item limits, no size limits, the same blocks and the same .securepad backup files.
Rich items
Mix text, tables, images, PDF/DOCX/ZIP files, videos and audio in one item. Scan paper documents with the camera straight into a PDF. Search inside document text, file names and content.
Data blocks
Credit cards, bank accounts, servers, Wi-Fi, identities, credentials, seed phrases – plus your own custom templates with typed fields.
Multiple keys, plausible deniability
Lock individual items with different passcodes. Unlock one group at a time; nobody knows how many passwords you have.
Search, filters, grid view
Comma-separated multi-term search, tag and color filters, stacked sorting, and a spreadsheet-like view across all data blocks.
Portable backups
Export and import encrypted .securepad files. Move data between the phone and the browser whenever you want.
Steganography & more
Hide text inside PNG images, record voice memos straight into the vault, export tables to PDF, color-code items.
Choose how you use it
SecurePad Web
Nothing to install. Your encrypted vault follows you to any computer or phone. Works even if you lose your device – log in, enter the vault password, and everything is back.
client.securepad.onlineSecurePad for Android
The original offline vault, with camera capture, OCR, biometrics and no internet permission at all. Free edition with limits, Pro edition unlimited.
Questions people ask
Can you read my data if I give you my email and password?
No. With the account password we could only hand you the encrypted records. Decryption needs the vault password (or the recovery key), which never leaves your browser. We designed it so that even a full copy of the server cannot reveal your notes.
What if I forget the vault password?
Use the recovery key shown when the vault was created (you can regenerate it from Settings while unlocked). If both are lost the data is mathematically unrecoverable; you can reset the vault and start again.
What if I forget the account password?
Request a reset link by email. Only the login changes; the vault password and your data stay exactly as they were.
How are large files handled?
The list of items is small and downloaded at unlock. Each attachment is a separate encrypted blob, compressed where it helps, fetched only when you open it and cached in memory for the session.
Is the phone app going to sync too?
Today you move data with .securepad exports. The web edition uses the same item format, so a cloud-connected mobile edition is the natural next step.
Which browsers work?
Any modern browser with Web Crypto: Chrome, Edge, Firefox, Safari (desktop and mobile). Nothing is stored unencrypted in the browser; the key lives in the tab and is forgotten when you close it or press Lock.