Encrypted attachments
Last updated: 28 Jun 2026
AES-GCM encrypted blobs in per-vault storage alongside SQLite metadata.
Who this is for
Anyone attaching scans, receipts, ID photos, or PDFs to asset items—especially Document entries and credentials with supporting files.
What you need
| Tier | Free |
| Vault state | Unlocked |
| Network | Offline for local attach; online only if cloud sync must upload new blobs |
| Feature toggle | None |
Steps
Add an attachment
- Unlock your vault and open an asset item (create one or pick from
https://se.nt2.me/assets). - Scroll to the Attachments section in the detail panel.
- Drag and drop a file onto the drop zone, or choose Add file / Browse.
- Wait for encryption to finish—the file name and size appear in the list when done.
Preview or download
- Select an attachment row to preview images inline or open PDFs in a new tab (browser-dependent).
- Use Download to save the decrypted file to your device when you need a copy outside NT².
Remove an attachment
- Open the item’s attachment list.
- Choose Delete on the file you no longer need and confirm.
- Local ciphertext is removed; synced vaults replicate the deletion when cloud sync runs.
Tips and common mistakes
- 10 MB limit—compress large scans or split content across multiple items if needed.
- Supported types only—PDF, JPEG, PNG, WebP, GIF. Rename files with the correct extension if the browser reports an empty MIME type.
- Empty files—zero-byte uploads are rejected.
- Pair with Document template—structured fields (passport number, expiry) plus a scan attachment give you searchable metadata and visual proof.
- Sharing—attachments can travel with encrypted shares; size limits still apply on the wire.