01
Strong encryption
AES-256-GCM, with the key made from your passphrase by PBKDF2-SHA-256 at 600,000 rounds, a fresh random salt, and a fresh random IV every time.
Free tool · Runs in your browser
Encrypted
note.
Need to send someone a password, a Wi-Fi key, or account details? Lock it with a passphrase here, send the encrypted text or link, and give them the passphrase another way. It's encrypted on your device and never uploaded.
0 / 20,000
Six random words, about 78 bits.
Decrypted note
Your note is encrypted and decrypted right here in your browser with the Web Crypto API. It is never uploaded, stored, or logged — not by Veteran Solutions, not by anyone. Only the encrypted text you choose to send leaves this page, and it can't be read without the passphrase.
Last updated
How it works
Locked on your device. Opened on theirs.
Your note never reaches our server or anyone else's. Only the scrambled text travels, and it's useless without the passphrase.
02
Nothing uploaded
Encryption and decryption run in this page with the Web Crypto API. A link keeps the note after the # sign, which browsers never send to a server, and this page clears it from the address bar.
03
Two channels
Send the encrypted text by email or chat and the passphrase by phone call or text message. Someone who sees only one can't read the note.
Step by step
How to send a password safely.
- Type the password or note and choose a passphrase, or click Suggest a passphrase.
- Click Encrypt, then copy the text or the link.
- Send the text or link by email or chat.
- Give the passphrase another way: a phone call, a text message, or in person.
- The other person opens the link (or pastes the text under Decrypt here) and enters the passphrase.
- Afterward, delete the message, and change the password if it was a temporary one.
There is no copy anywhere but the message you send, so there is nothing for us to delete, and no way to recover a note if the passphrase is lost.
FAQ
Common questions.
Can Veteran Solutions read my note?
No. The note is encrypted and decrypted by code running in your browser. It is never sent to our server or anyone else's. With a link, the note sits after the # sign, a part of the address browsers never send to servers, and this page removes it from the address bar as soon as it opens.
What if I forget the passphrase?
The note can't be opened. There is no reset and no copy on any server, which is what keeps it private. Send it again with a new passphrase.
Is it safe to email the link or text?
Yes, as long as the passphrase travels separately. Without the passphrase the text is unreadable. Use a strong passphrase: the suggested six words are about 78 bits.
Does the note expire?
No. Anyone with the text and the passphrase can open it at any time, so delete the message after it has been read, and change any shared password that should stay secret.
What encryption does it use?
AES-256 in GCM mode, which also detects any change to the text. The key comes from your passphrase through PBKDF2 with SHA-256 and 600,000 iterations, the level OWASP recommends, with a random 16-byte salt and a random 12-byte IV for every note. All of it runs in your browser's Web Crypto API.
More free tools
See all free tools →
Veteran Solutions, LLC
Need help with your network?
Monitoring assessments, NOC runbooks, network administration, and hands-on hardware deployment from a service-disabled veteran-owned small business in Waco, Texas.