Vault V2 format — QEV docs

What this is. The portable file format for one sealed secret or document. Separate from team evidence bundles and the capture gateway.

In plain English

You create a vault file (JSON). Unlock needs your passphrase (or keys). The file can move through email, chat, or disk. The server that hosts this website does not need your passphrase to serve the tool.

Crypto (standard algorithms)

Schema: BRY-NFET-SX-VAULT-V2 (QEV Vault V2 compatible)
KDF: Argon2id (memory-hard passphrase → key material)
AEAD: XChaCha20-Poly1305
Key wrap: a random content key is wrapped under the passphrase-derived key so the phrase unlocks without being the only root of ciphertext entropy

What you do with it

Open the browser vault (or desktop / CLI).
Enter plaintext + passphrase → download/export the vault file.
Send the file on one channel; share the phrase out of band.
Recipient opens with the same tool family (browser, desktop, CLI).

Modes

self — personal vault / archive
share — handoff-oriented packaging

Browser tool · Download apps / CLI · Evidence Bundle V1 · Security posture

In plain English

Crypto (standard algorithms)

What you do with it

Modes

Related