NullID public guide
These answers describe the current NullID browser workbench and local CLI behavior. They are intentionally narrow so users can make informed choices.
No required backend receives your files for the core browser workflows. Files and text are processed in your browser session. The application assets still load from the NullID origin and may be refreshed from that origin.
The root PWA workbench can reload offline after the runtime shell has been loaded and cached in a supported browser. The first load and updates require the production origin.
The public repository is MIT licensed and the hosted browser workbench is intended to be free to use. No paid account system is part of the app.
Browser image cleanup depends on browser decoding and encoding support. JPEG, PNG, WebP, AVIF, GIF, BMP, and TIFF receive format diagnostics where applicable. PDF metadata cleanup is available for visible fields, while HEIC/HEIF and complex document/media formats may require external offline tools.
NULLID:ENC:2 envelopes use PBKDF2 with SHA-256 or SHA-512 to derive a 256-bit AES-GCM key. Version 2 authenticates header metadata with additional data.
No. NullID can inspect, transform, hash, and label what it can verify, but it cannot guarantee safety, sender identity, legal sufficiency, or absence of every hidden issue.
It proves only the checks that complete: schema validity, embedded hash consistency, envelope integrity, or shared-passphrase HMAC verification for supported formats. Declared-only metadata remains labeled as such.
Preferences and tool settings use nullid-prefixed browser storage keys. Secure Notes stores encrypted records in IndexedDB when available, with a localStorage fallback in restricted runtimes.
The workbench has responsive compact controls and mobile-oriented E2E coverage. Browser capability support still varies by device, especially for service workers, storage, image codecs, and WebAuthn.
Yes. The repository is public and licensed under MIT. Security issues should be reported privately through the repository security policy.
Redact masks sensitive text spans. Sanitize applies repeatable text/log cleanup policies and batch processing. Metadata inspects and cleans supported file metadata and image/PDF outputs.
Use Wipe local data in the workbench, including the vault option when needed. Browser site-data controls can additionally remove service-worker caches, IndexedDB, localStorage, and installed PWA data.