Sekuvo
Naija
Transfer

From computer go phone,
with no network for middle.

Sekuvo no get internet permission, so secret fit only reach your phone through road wey you show am. Dis page dey explain those roads: di easiest one na aktar.html and QR, di most careful one na envelope wey you build for your own terminal.

Download aktar.html

v1.0.0 · 53 KB · one file, e dey run from your own disk

SHA-256 · v1.0.085ee1729fda96072b36303074f21a170d5361c0577a920ef631bd6884d5b653d
How I go verify am?

Run di command for your system inside terminal; wetin e print must match di value for up exactly. Di same value dey for GitHub release notes. You fit also keep am for Sekuvo as Tool anchor (di fingerprint button for home screen) and compare am with your phone next time wey you download.

# macOS / Linux shasum -a 256 aktar.html # Windows (PowerShell / cmd) certutil -hashfile aktar.html SHA256

Na download, no be web page: di address bar go show file://. sekuvo.com no go ever ask you for secret. aktar.html dey speak only English and Turkish for now.

Why QR

Three doors dey stay closed.

Typing with hand dey spoil things

One wrong character inside 64-character API key and di key don die. To type long private key enter phone, for real life, no possible.

Clipboard dey leak

Anything wey you copy, di app wey open dat time fit read am, and cloud clipboard go carry am go other devices. Na why Sekuvo no dey ever use am as road.

Network no dey

Di app no get INTERNET permission, so file sync, e-mail or server no be option. Light wey dey travel from screen go camera no dey cross any network at all.

Step by step

With aktar.html

  1. Download

    Get aktar.html with di button for up or from di release page. Na one file; nothing to install.

  2. Verify

    Compute im SHA-256 and compare am with di value wey dem publish. If dem no match, no open di file.

  3. Open

    Double-click am. Di address bar go show file://, no be website, and di page no go ever connect internet.

  4. Fill and encrypt

    Write title, pick type (Account, Everyday, Card or Secure note), paste di secret or pick .pem / .env file. Choose transfer password and press Encrypt and show the QR.

  5. Scan for phone

    Sekuvo → ➕ → Import via QR. Big envelope dey split into many frames wey dey change for screen; di phone go collect dem any order. Enter di same password and di entry go add.

No even type di password

Di transfer wizard

Di ⇄ button for home screen go open transfer wizard. Di phone go generate one-time password with letters and numbers — keyboard layout difference no fit affect am — and, as Bluetooth keyboard, e go type am enter both password fields of aktar.html one time. Press Encrypt and show the QR for computer and Scan QR for di wizard: di password don already dey for phone, so you no go ever type am.

Other roads

If you no wan use aktar.html

Envelope → QR page

You no want make browser encrypt anything? Build di envelope for your own terminal with thirty-line script; dis page go only turn ciphertext into QR frames.

Open di Envelope → QR page →

Import from text

Any way wey you fit carry di envelope as text go work: ➕ → Import from text, paste, enter password.

Command line: vault-clip.py

E dey do di same thing from clipboard or file, and e dey draw di QR straight inside terminal.

See di code for GitHub →

Build your own envelope

Di envelope na open format, no be something wey only Sekuvo fit make. Di recipe dey for repository.

Read di recipe →
Wetin di QR dey carry

Envelope, never di secret.

Anybody wey snap di QR go get only dis one. Di transfer password dey turn key through 310,000 rounds of PBKDF2, wey make every guess slow; without di password, di data field na just noise.

{ "app": "vault", "version": 1, "kdf": { "algo": "PBKDF2WithHmacSHA256", "iterations": 310000, "salt": "…16 bytes, base64…" }, "cipher": "AES-256-GCM", "data": "…12-byte IV + ciphertext + 16-byte tag, base64…" }
Questions

Questions wey people dey ask

My secret dey go internet?

No. aktar.html dey encrypt with browser WebCrypto for your machine and e dey draw di QR for your screen. Sekuvo no get internet permission; di camera image dey decode inside di app.

Why downloaded file instead of web page?

Web page wey dey ask for secret look exactly like phishing page. And page for server fit change every time you visit; di digest of file wey you download dey fixed and you fit check am.

Wetin about big files?

Di entry limit na 256 KB. Big envelope dey split into many QR frames wey dey change; di phone go collect dem any order and show which frames still dey miss.

Which languages aktar.html dey speak?

English and Turkish for now.

And from phone go computer?

Di other direction na Bluetooth: your phone dey type enter computer like keyboard, with nothing installed for di computer.

← Go back to sekuvo.com