Report vulnerabilities privately through GitHub: Security → Report a vulnerability on this repository. Do not open public issues for security problems.

Supported: the latest release.

BitVault is maintained by volunteers under the GPL-3.0-only licence, with no guarantee of response times.

Secret pastes are encrypted in the browser: the server never sees the password or the key, and a lost password cannot be recovered. Private pastes are encrypted on the server with a key derived from the paste password.