Typing by hand breaks things
One wrong character in a 64-character API key and the key is dead. Typing a long private key into a phone is, in practice, impossible.
Sekuvo has no internet permission, so a secret reaches your phone only along a path you show it. This page walks through those paths: the easiest is aktar.html and QR, the most cautious is an envelope you build in your own terminal.
85ee1729fda96072b36303074f21a170d5361c0577a920ef631bd6884d5b653dRun the command for your system in a terminal; the output must match the value above exactly. The same value is published in the GitHub release notes. You can also keep it in Sekuvo as a Tool anchor (the fingerprint button on the home screen) and compare against your phone the next time you download.
A download, not a web page: the address bar shows file://. sekuvo.com never asks you for a secret.
One wrong character in a 64-character API key and the key is dead. Typing a long private key into a phone is, in practice, impossible.
Whatever you copy can be read by the app that is open at that moment, and cloud clipboards carry it to other devices. That is why Sekuvo never uses it as a path.
The app has no INTERNET permission, so file sync, e-mail or a server are not options. Light travelling from a screen to a camera crosses no network at all.
Get aktar.html with the button above or from the release page. It is one file; nothing to install.
Compute its SHA-256 and compare it with the published value. If they differ, do not open the file.
Double-click it. The address bar shows file://, not a website, and the page never connects to the internet.
Write a title, pick a type (Account, Everyday, Card or Secure note), paste the secret or pick a .pem / .env file. Choose a transfer password and press Encrypt and show the QR.
Sekuvo → ➕ → Import via QR. Large envelopes are split into several frames that cycle on screen; the phone collects them in any order. Enter the same password and the entry is added.
The ⇄ button on the home screen opens the transfer wizard. The phone generates a single-use password of letters and digits — immune to keyboard-layout differences — and, acting as a Bluetooth keyboard, types it into both password fields of aktar.html at once. Press Encrypt and show the QR on the computer and Scan QR in the wizard: the password is already on the phone, so you never type it.
Don't want the browser to encrypt anything? Build the envelope in your own terminal with a thirty-line script; this page only turns ciphertext into QR frames.
Open the Envelope → QR page →Any way you can carry the envelope as text works: ➕ → Import from text, paste, enter the password.
Does the same from the clipboard or a file, and draws the QR right in the terminal.
See the code on GitHub →The envelope is an open format, not something only Sekuvo can make. The recipe is in the repository.
Read the recipe →Whoever photographs the QR gets only this. The transfer password becomes a key through 310,000 rounds of PBKDF2, which makes every guess slow; without the password the data field is noise.
No. aktar.html encrypts with the browser's WebCrypto on your machine and draws the QR on your screen. Sekuvo has no internet permission; the camera image is decoded inside the app.
A web page that asks for secrets looks exactly like a phishing page. And a page on a server can change on every visit; the digest of a file you downloaded is fixed and checkable.
The entry limit is 256 KB. Large envelopes are split into several QR frames that cycle; the phone collects them in any order and shows which frames are still missing.
English and Turkish for now.
The other direction is Bluetooth: your phone types into the computer like a keyboard, with nothing installed on the computer.