Encrypted attachments

Last updated: 28 Jun 2026

AES-GCM encrypted blobs in per-vault storage alongside SQLite metadata.

Who this is for

Anyone attaching scans, receipts, ID photos, or PDFs to asset items—especially Document entries and credentials with supporting files.

What you need

TierFree
Vault stateUnlocked
NetworkOffline for local attach; online only if cloud sync must upload new blobs
Feature toggleNone

Steps

Add an attachment

  1. Unlock your vault and open an asset item (create one or pick from https://se.nt2.me/assets).
  2. Scroll to the Attachments section in the detail panel.
  3. Drag and drop a file onto the drop zone, or choose Add file / Browse.
  4. Wait for encryption to finish—the file name and size appear in the list when done.

Preview or download

  1. Select an attachment row to preview images inline or open PDFs in a new tab (browser-dependent).
  2. Use Download to save the decrypted file to your device when you need a copy outside NT².

Remove an attachment

  1. Open the item’s attachment list.
  2. Choose Delete on the file you no longer need and confirm.
  3. Local ciphertext is removed; synced vaults replicate the deletion when cloud sync runs.

Tips and common mistakes

  • 10 MB limit—compress large scans or split content across multiple items if needed.
  • Supported types only—PDF, JPEG, PNG, WebP, GIF. Rename files with the correct extension if the browser reports an empty MIME type.
  • Empty files—zero-byte uploads are rejected.
  • Pair with Document template—structured fields (passport number, expiry) plus a scan attachment give you searchable metadata and visual proof.
  • Sharing—attachments can travel with encrypted shares; size limits still apply on the wire.