Four things, sealed.
What lives insideFiles & media
Images · video · documentsImported files are encrypted immediately. The originals are securely deleted from where they came.
Secure notes
Private thoughts, kept sealedEncrypted notes with Markdown support. Never stored as plain text — not for a moment.
Bookmarks
Browsing history, sealedSave pages from the built-in private browser. No traces left behind on your system.
Passwords
Credentials, encrypted locallySaved passwords are surfaced in the built-in browser exactly when you need them.
Unlock. Import. Browse. Lock.
Unlock your vault
Enter your vault password. Your master key is derived locally — never stored, never transmitted. It lives only in memory, only while you're inside.
Import and organise
Drag files straight into the vault, or save media directly from the built-in browser. Organise with folders, tags, and ratings — everything in one place, your structure, nobody else's.
Browse privately, save everything
The built-in browser runs in a completely isolated session — no history, no cookies, nothing left on your system. Save images, videos, or entire pages directly into your encrypted vault in one click. When you lock, the browser clears itself.
No cloud. No account. No telemetry.
Sanctum protects your data at rest. The cryptography is conventional and conservative on purpose — the kind you can read about and verify, not trust on faith.
Read the full model →Sanctum is free.
If it protects something that matters to you, a one-time contribution supports continued development.