What is P47H Vault?

P47H Vault is the open, local-first layer of P47H Edge Trust. The @p47h/vault-js SDK stores secrets in the browser without exposing keys to JavaScript, servers, or third-party APIs — everything runs locally using WebAssembly compiled from Rust.

It’s the cryptographic foundation — identity, encrypted storage, signing — that a broader, distributed trust model is built to extend. This documentation covers the local layer that ships today.

JS

Your App

WASM Vault

IndexedDB

Fundamentals

No Network

All cryptographic operations happen in your browser. Secrets are never sent to any server. Zero backend dependencies.

Memory Isolation

Cryptographic keys live in WebAssembly linear memory, which the JavaScript heap cannot read. Injected scripts and extensions can’t extract the raw keys — a meaningful reduction in blast radius versus plaintext localStorage. (It is not a defense against code running in your page while the vault is unlocked.)

Standard Cryptography

We don’t roll our own crypto. We use standard, widely-reviewed, community-maintained Rust crates: argon2, chacha20poly1305, ed25519-dalek.

Offline-First

Works without internet connection. Data is persisted encrypted to IndexedDB and decrypted locally when you need it.