A complete post-quantum cryptographic toolkit built for your browser. No installations, no servers, no compromises.
Generate fresh cryptographic key pairs using CRYSTALS-Kyber (ML-KEM), the NIST-standardized post-quantum Key Encapsulation Mechanism. Choose from three security levels to match your needs.
All key material is generated locally using your browser's cryptographically secure random number generator — never transmitted anywhere.
QSafe Vault uses a proven hybrid approach: ML-KEM encapsulates a fresh AES-256 session key, which then encrypts your file with GCM authenticated encryption. You get quantum-safe key exchange AND fast symmetric encryption.
The 128-bit authentication tag in GCM protects against tampering, giving you both confidentiality and integrity in a single operation.
Sign files using CRYSTALS-Dilithium (ML-DSA-65) — the NIST-standardized post-quantum signature scheme. Signatures provide cryptographic proof that a file came from you and hasn't been modified.
QSafe Vault can auto-sign on every encryption operation and auto-verify on decryption, making non-repudiation seamless.
All encrypted and signed files are stored in a session vault with full metadata. Inspect algorithm details, ciphertext sizes, key encapsulation data, and signature status for every file.
The vault is fully in-memory — everything is cleared when you close the tab, with no persistence to external storage.
All features run entirely in your browser. No sign-up required.