Data Model

A structurally sound approach to client-side deterministic serialization.

Encrypted VaultBLOB RECORD (SERVER)A8F3...44901BPasswords[]- url, username- cipher_passwordNotes[]- title, tags- cipher_contentMetadata / Config- user_preferences- vault_version: v1.0.0

Passwords

Every password entry stores its standard credentials alongside a separate encrypted field for the actual password string. The metadata like URL and Username remain visible for searching.

Secure Notes

Notes are fundamentally similar. A title and optional tags structure the navigation, while the body content is heavily shielded behind the AES-GCM engine.

Envelope Structure

The overall database schema embraces an Envelope pattern. The database record is merely an Envelope wrapper for an arbitrary encrypted payload of bytes, ensuring forward compatibility.