DFIELDSOLUTIONS

Free software

LabVeylum: Your words. Yours alone

Web Crypto E2E: passphrase → PBKDF2 → non-extractable AES-256-GCM; storage holds only ciphertext, and 'a wrong passphrase can't decrypt' is a tested invariant.

Free software1 sections · 2 min readBy Dezső Mező.mdFree softwareVeylum

Veylum is an end-to-end encrypted notes app where your text never leaves the device in readable form. It uses the Web Crypto API: a passphrase is stretched with PBKDF2 into a non-extractable AES-256-GCM key, and storage only ever holds ciphertext. It is a from-scratch, dependency-light build where "a wrong passphrase can't decrypt" is a tested invariant, and you can download and run it locally.

01About the app

Applied cryptography done right

What to take away

  • Web Crypto E2E: passphrase → PBKDF2 → non-extractable AES-256-GCM; storage holds only ciphertext, and 'a wrong passphrase can't decrypt' is a tested invariant.
  • Download: Veylum (ZIP)
We build this for clientsFull-stack

Read the full write-up

More from the lab

Browse all entries

Want this looked at on your own system?Start a conversation

5.0
“New shop, more orders in the first week.”Müller Márk · GeekCornerManaging Director · Hungary