Use strong, unique passwords
Do not reuse a password from email, social media, or banking. A long passphrase is usually better than a short clever password. Think in terms of memorable phrases, not just symbols.
This guide explains how to protect your files, how to think about passwords and scams, how to write journal entries more safely, and what the encryption in this tool is actually doing. The goal is not fear. The goal is informed use.
Good encryption matters, but security is also about behavior. A strong lock helps, but it does not help much if the key is left lying around.
Do not reuse a password from email, social media, or banking. A long passphrase is usually better than a short clever password. Think in terms of memorable phrases, not just symbols.
If the device has malware, spyware, or a keylogger, local encryption alone cannot save you. Use updated, trusted devices whenever possible.
Encryption protects privacy, but it does not protect against accidental deletion, disk failure, or lost USB drives. Keep secure backups of files you truly need.
If you send an encrypted file by email, send the password through a different channel such as a text message, Signal, or a phone call.
Once you finish working with sensitive material, clear it from the screen and be mindful of clipboard history, downloaded plain-text copies, and browser autofill behavior.
The encrypted file itself may still be safe, but public computers and public Wi-Fi can introduce other risks. Shared machines are often the bigger danger than the file transfer itself.
For many people, the biggest risk is not the encryption itself. It is accidentally revealing too much information inside the entry or around it.
entry-2026-03-28.pvaultnotes-a1.pvaultmedical-diagnosis-john-smith.pvaultbank-account-passwords.pvaultSometimes the real attack is not technical at all. It is a person trying to pressure, trick, or rush you into doing something unsafe.
Here is the plain-English answer: the tool uses modern browser cryptography correctly for its intended purpose, but the overall security still depends heavily on password quality and device safety.
The tool uses AES-GCM, a modern authenticated encryption mode. That means it is designed not only to hide the contents, but also to detect tampering with the encrypted data.
The password is not used directly. A key is derived from it using PBKDF2 with SHA-256. This helps make password guessing more expensive than using the raw password alone.
The tool generates a fresh salt and IV for every encryption. That matters because encrypting the same text twice should not produce the same result.
If someone intercepts a .pvault file, they should not be able to read it without the correct password. The cryptography is strong enough for practical use, provided the password is also strong and the device is not compromised.
The biggest weak points are usually weak passwords, reused passwords, infected devices, and people being tricked into revealing the password or plain text. In other words, human factors often matter more than the algorithm itself.
Clear answers to the questions users are likely to ask.
Yes. The encrypted file can be sent by email or other services. For better security, send the password through a different channel.
Because many attacks try to bypass the encryption entirely by tricking the person. A scammer may not need to break the algorithm if they can persuade someone to reveal the password or decrypt the file for them.
No. That is part of the privacy model. The operator does not keep a copy of user passwords.
It can be a strong option for private writing, especially compared with ordinary plain-text notes. Still, the security of the device, the strength of the password, and the user’s handling habits all matter.