Vault

Context you own. Encrypted where it lives.

Slices are encrypted in this browser with a key derived from your passphrase (PBKDF2, 310k rounds → AES-256-GCM). Titles and contents are both encrypted. Prism stores ciphertext, never the key. Each slice carries the highest beam allowed to read it.

Passphrase

Never sent anywhere. Forget it and the vault is gone.

Slices0
Unlock to list slices.

Backups hold encrypted titles and contents, plus sizes and dates. They are useless without your passphrase.

Vault locked

Enter your passphrase. On first use, this creates a new vault in this browser with a couple of example slices.

Share a slice

Generates a one-time link containing a fresh key for just this slice, with an expiry. The recipient's browser decrypts it; Prism only relays ciphertext.