Skip to main content
dRouter
Vault locked
Passphrase vault

Passphrase vault

No account and no email. Your passphrase derives AES-256-GCM and Ed25519 keys inside your browser and never leaves this device.

Option 1

Create a new vault

Copy these six random words and save them in your password manager or on paper. They derive your local encryption keys inside your browser.

Your 6-word passphrase (generated on device)
Generating in browser...
Option 2

Unlock with my passphrase

Enter your existing passphrase to derive your vault keys in browser memory. The same words always produce the same vault ID.

Type your passphrase above to preview its local vault ID.
Local Scrubber Dictionary (Feeds Console)

Custom scrub terms

Terms saved in your unlocked vault automatically feed the chat console through the client prompt pipeline. Your browser replaces each term with [ENTITY_N] before HPKE encryption and restores it when the enclave replies.

Vault locked (0 active terms)
Vault is locked. Create or unlock a vault above to add custom scrub terms.
Synthetic Scrubber Preview (2 redactions)
Synthetic test input
Outbound text: Synthetic test prompt: review Fictional-Project-X and [EMAIL_1] with token [SECRET_1].
Padded frame: 4,096 BRisk score: 65 → 0
Portable Encrypted Backup

Export, import, or wipe your vault

Exported files contain only AES-256-GCM ciphertext and an Ed25519 signature. Neither your passphrase nor plaintext terms are written to disk or localStorage.

Export

Export encrypted vault file

Download your custom scrub terms and notes as an AES-256-GCM encrypted, Ed25519-signed .drouter-vault.json file.

Zero in-memory keys and clear browser storage:
Import

Import encrypted vault file

Upload or paste an exported .drouter-vault.json bundle and enter its passphrase to verify the Ed25519 signature and decrypt.

Key derivation: PBKDF2-HMAC-SHA-512 (210,000 rounds) + HKDF-SHA-384 (AES-256-GCM, Ed25519, X25519).Return to console