The downloaded HTML file is a self-contained application. It includes a custom icon and all the necessary code to decrypt your data. Your encrypted vault content is embedded directly within this file. When you open it and enter your passphrase, the code inside the file decrypts your data locally in your browser without needing to connect to any server.

Your encrypted data will be rendered permanently and irreversibly inaccessible. This is a fundamental principle of our zero-knowledge design. We cannot recover your passphrase because we never possess it. The absolute security of your data is entirely within your control.

Your data, once encrypted, resides exclusively within the HTML Vault Launcher file that you manage on your own local storage, be it a hard drive, USB stick, or private cloud folder. At no point is your unencrypted data transmitted to or stored on any external server.

TrustedVault employs AES-256 GCM, an authenticated encryption standard mandated by governments and financial institutions for protecting top-secret and mission-critical information. Its implementation is open-source, allowing for continuous, independent security audits by the global expert community to verify its integrity and absence of backdoors.

This tool operates entirely within the secure sandbox of your browser and lacks the permissions to directly modify files on your computer's filesystem—a critical security boundary. When you 'Seal & Save', the application generates a new, fully re-encrypted HTML Vault Launcher, which you then download to replace your previous version. This ensures a clean, atomic, and secure update process.