# Veylum: Your words. Yours alone

> Web Crypto E2E: passphrase → PBKDF2 → non-extractable AES-256-GCM; storage holds only ciphertext, and 'a wrong passphrase can't decrypt' is a tested invariant.

Veylum is an end-to-end encrypted notes app where your text never leaves the device in readable form. It uses the Web Crypto API: a passphrase is stretched with PBKDF2 into a non-extractable AES-256-GCM key, and storage only ever holds ciphertext. It is a from-scratch, dependency-light build where "a wrong passphrase can't decrypt" is a tested invariant, and you can download and run it locally.

## About the app

Applied cryptography done right

## What to take away

- Web Crypto E2E: passphrase → PBKDF2 → non-extractable AES-256-GCM; storage holds only ciphertext, and 'a wrong passphrase can't decrypt' is a tested invariant.
- Download: Veylum (ZIP)

## Tags

Free software, Veylum

## Read the full write-up

/downloads/veylum.zip

## We build this for clients

https://dfieldsolutions.com/en/services/full-stack

## More from the lab

- https://dfieldsolutions.com/en/lab/sylex.md — Sylex: Make sense of the slashes
- https://dfieldsolutions.com/en/lab/kindra.md — Kindra: Miss a beat, not the rhythm
- https://dfieldsolutions.com/en/lab/voxara.md — Voxara: Argue better. Lose gracefully
- https://dfieldsolutions.com/en/lab/wraithward.md — Wraithward: Spot the bait before you bite

---

Source: https://dfieldsolutions.com/en/lab/veylum
DField Solutions — Torony köz 5-1.a, 2120 Dunakeszi, Hungary — +36 20 722 0002 — dezso@dfieldsolutions.com
Booking: see https://dfieldsolutions.com/en/contact