Open source

Read the code that locks your vault

This is the exact encryption core that runs on your device: the same file, compiled to WebAssembly. Pick a file to see what it does and where it sits in the flow.

Cargo.toml — potent-cipher-core
Cargo.toml

crates › core › Cargo.toml

[package]
name = "potent-cipher-core"
description = "The Potent Cipher cryptography core: key hierarchy, item encryption and the .pcipher file format."
edition.workspace = true
version.workspace = true
license.workspace = true
repository.workspace = true

[lib]
name = "pc_core"

[dependencies]
argon2 = { version = "0.5", default-features = false, features = ["alloc", "zeroize"] }
chacha20poly1305 = { version = "0.10", features = ["stream"] }
crypto_box = { version = "0.9", features = ["seal"] }
ed25519-dalek = { version = "2", features = ["rand_core", "zeroize"] }
hkdf = "0.12"
hmac = "0.12"
sha1 = "0.10"
sha2 = "0.10"
rand_core = { version = "0.6", features = ["getrandom"] }
zeroize = { version = "1", features = ["derive"] }
subtle = "2"

[dev-dependencies]
hex = "0.4"
Last updated Nov 10, 2026, 3:36 PM UTCcommit f8df72427 linestoml

Try it with the real code

Type something and a passphrase. Your browser runs the core above and shows the .pcipher bytes it made. Nothing is sent anywhere.

Header (73 bytes, readable)

Magic · 7··
Version · 1··
Mode · 1··
KDF · 1··
Argon2id params · 12··
Salt · 16··
Key id · 8··
Chunk size · 4··
Metadata length · 4··
Nonce prefix · 19··

Encrypted body (looks random)

··