actualNoteContentPart: Vault Notes are notes that are end-to-end encrypted, with [their encryption password never sent to our servers](https://www.amplenote.com/help/amplenote_security_design#Changing_a_Standard_Note_to_a_Vault_Note) . In practical terms, this means that even if a malicious employee or state/government actor somehow obtained access to the Amplenote database, a long Vault Password would render them unable to decrypt the content of your Vault Notes within a human lifetime, even if they possessed access to most advanced computing resources known. The technical aspects of how Vault Notes achieve this level of security are described below.
  
  # Accessing Vault Notes
  Vault Notes are currently a feature available in the [Amplenote Unlimited Subscription tier](https://www.amplenote.com/subscriptions/new) . We appreciate your support building Amplenote into a product that we can build for the rest of our lives! 🙏😊
  
  # Using Vault notes
  Details about how to create a Vault Note, and how Vault Notes are different than standard notes.
  
  ## What is a Vault Note?
  A "Vault Note" is a note that gets stored using the Vault Encryption Key, which is never sent to or available to the Amplenote database server. 
  
  As described in depth in our [technical security documentation](https://www.amplenote.com/help/amplenote_security_design#Changing_a_Standard_Note_to_a_Vault_Note) , the Vault Encryption Key has the following properties
  	A random 256-bit Vault Key Salt value is generated and stored in the database encrypted with AES-256-GCM using an encryption key that is not available to the database server and a randomly generated Initialization Vector
  	The Vault Password entered by the user and the Vault Key Salt are used with PBKDF2-HMAC-SHA256 to produce the 256-bit Vault Key
  	PBKDF2-HMAC-SHA256 is configured to use [100,000 rounds﻿](https://gist.github.com/epixoip/a83d38f412b4737e99bbef804a270c40)  
  	A Vault Key Verifier is [stored on the server﻿](https://www.amplenote.com/help/amplenote_security_design) , allowing for a zero-knowledge proof to ensure that the same Vault Password is used for all Vault Notes
processedNoteContent: ---
  title: What are Vault Notes and how do I create them?
  tags: 
  ---
  Vault Notes are notes that are end-to-end encrypted, with [their encryption password never sent to our servers](https://www.amplenote.com)`
   . In practical terms, this means that even if a malicious employee or state/government actor somehow obtained access to the Amplenote database, a long Vault Password would render them unable to decrypt the content of your Vault Notes within a human lifetime, even if they possessed access to most advanced computing resources known. The technical aspects of how Vault Notes achieve this level of security are described below. 
  Accessing Vault Notes
  Vault Notes are currently a feature available in the [Amplenote Unlimited Subscription tier](https://www.amplenote.com)`
   . We appreciate your support building Amplenote into a product that we can build for the rest of our lives! 🙏😊 
  Using Vault notes
  Details about how to create a Vault Note, and how Vault Notes are different than standard notes. 
  What is a Vault Note?
  A "Vault Note" is a note that gets stored using the Vault Encryption Key, which is never sent to or available to the Amplenote database server. As described in depth in our [technical security documentation](https://www.amplenote.com)`
   , the Vault Encryption Key has the following properties
  A random 256-bit Vault Key Salt value is generated and stored in the database encrypted with AES-256-GCM using an encryption key that is not available to the database server and a randomly generated Initialization Vector
  The Vault Password entered by the user and the Vault Key Salt are used with PBKDF2-HMAC-SHA256 to produce the 256-bit Vault Key
  PBKDF2-HMAC-SHA256 is configured to use [100,000 rounds﻿](https://gist.github.com)`
  
  A Vault Key Verifier is [stored on the server﻿](https://www.amplenote.com)`
   , allowing for a zero-knowledge proof to ensure that the same Vault Password is used for all Vault Notes
noteTitle: What are Vault Notes and how do I create them?