Secure Vault
Military-grade protection for your Web3 assets. Your keys never leave your device.
Zero-Knowledge Architecture
Aura OS is built on a "local-first" principle. Unlike many Web3 tools that store encrypted blobs in the cloud, Aura OS treats your machine as the only source of truth. The vault is an encrypted database stored directly on your hardware.
No Cloud Storage
Keys are never uploaded, backed up, or synced to any remote server. If your computer isn't on, your keys aren't accessible.
Invisible Input
Aura uses Linux-style silent input for passwords. Nothing is echoed to the screen, preventing "shoulder surfing" attacks.
Encryption Details
AES-256-GCM
We use the industry-standard Advanced Encryption Standard with a 256-bit key in Galois/Counter Mode. This provides both confidentiality and data integrity (authentication).
Argon2 Key Derivation
Your master password isn't just used as-is. It's passed through a high-memory, high-CPU Argon2 function to derive the actual encryption key, making brute-force attacks extremely difficult.
Vault Life Cycle
Security Recommendation
-
"Use a long passphrase instead of a short password. Entropy is your best friend."
-
Never share your master password. Aura OS team will never ask for it.