The VaultOnly you can open it.
Put files and notes in. They are encrypted in your browser before they leave your device, with a key made from your passphrase. APIR stores only what it cannot read.
How it is protected
Encrypted in your browser
AES-256-GCM, before a file leaves your device. Names, types and fingerprints are encrypted too.
Your passphrase stays here
Your key is made from your passphrase in this tab (PBKDF2-SHA-256, 600,000 rounds). APIR never receives the passphrase, the key or your recovery key.
APIR holds only ciphertext
A private bucket and database rows that answer only to your account, holding nothing APIR can read.
No outside scripts here
This page loads nothing from anyone else and runs no analytics. Its security policy lets it talk only to APIR.
It locks itself
The key lives only in this tab’s memory, and it is dropped after ten minutes idle or when you lock.
Nothing to hand over
APIR cannot open, recover or disclose what is in your vault, because it never has what it would take.
If you lose your passphrase and your recovery key, nobody can open the vault. Not you, and not APIR. That is what a vault nobody else can open costs.
It is yours alone, so nobody else can reach it after you, an executor included. What an executor needs to find belongs in the will register, kept with the will. Free for a person: up to 100 MB and 500 items, files up to 25 MB.