The Local-First Swiss Army Knife for Digital Privacy.
QRE Privacy Toolkit is a secure, cross-platform application designed to handle your sensitive data without relying on the cloud. It runs natively on Windows, macOS, Linux, and Android.
QRE Privacy Toolkit combines 12 essential privacy tools into one mathematically secure, memory-safe application:
Secure any file—photos, tax documents, 50GB video backups—using military-grade AES-256-GCM.
- Unlimited Size: Powered by a custom Rust Streaming Engine, you can encrypt files of any size without exhausting your RAM.
- Smart Compression: Automatically compresses documents while skipping already-compressed media files to save CPU cycles.
- Cross-Platform: Lock a file on your PC, unlock it on your Android phone.
A secure, offline, zero-knowledge database for your logins.
- Offline Authenticator (TOTP): Generate live 6-digit 2FA codes directly inside your vault. No need for cloud-synced authenticator apps on your phone.
- Generators: Built-in strong password generator and local strength meter.
An encrypted notepad for sensitive text that isn't just a password. Store recovery seeds, Wi-Fi codes, or private journals safely at rest.
Save your sensitive links (Bank logins, Medical portals, Crypto exchanges) in an encrypted vault, completely hidden from browser syncing and forensic tools.
Grabs text from your clipboard, encrypts it into a secure history, and wipes the OS clipboard immediately. Auto-clears entries after a customizable TTL.
A dual-purpose media privacy suite:
- Meta Cleaner: Scrub hidden GPS coordinates, camera models, and author data from Images (JPG/PNG/WebP), PDFs, and Office Docs.
- Steganography Detector: Mathematically analyzes the Least Significant Bits (LSB) of an image to calculate its Shannon Entropy, detecting hidden, encrypted payloads embedded inside normal-looking photos.
Detect data leaks before they happen, and check if you've already been compromised.
- Local Scanner: Rapidly scans unencrypted
.txt,.csv, and.envfiles on your hard drive to find exposed API keys, plaintext passwords, and crypto seed phrases. - HIBP API: Checks if your password has appeared in known data leaks using k-Anonymity. We send only the first 5 characters of the hash to the internet.
Verify that files you download (like crypto wallets, Linux ISOs, or installers) haven't been tampered with by hackers. Calculates SHA-256, SHA-1, and MD5 simultaneously.
When you delete a file normally, the data remains on your disk. The Shredder physically overwrites your files with random noise (up to DoD Standard 3-Pass) before deleting them. Includes free-space wiping for HDDs and TRIM commands for SSDs.
Share sensitive data (Wi-Fi passwords, Crypto addresses) with mobile devices completely offline. Data stays air-gapped on your screen.
Remove temporary files, browser caches (Chrome, Edge, Brave), Windows Temp, and developer build artifacts (npm, cargo) to free up space. Safely scans and removes orphaned Windows Registry keys.
Detects malicious files hiding behind fake extensions (e.g., salary.pdf.exe). Analyzes file headers (Magic Numbers) to determine the 'true' file type, ignoring the extension.
- Memory Zeroization: Cryptographic keys and plaintext payloads are actively scrubbed from your system's RAM (
0x00) the exact moment they are no longer needed, defeating cold-boot attacks and RAM-scrapers. - Key Derivation: Argon2id (Resistant to GPU brute-force attacks).
- Hybrid Paranoid Mode: Mitigates theoretical hardware RNG backdoors by XOR-mixing your physical mouse/touch timing jitter directly into the OS's cryptographic seed.
- Panic Button:
Ctrl+Shift+Qinstantly kills the app and wipes memory (Desktop). - Auto-Lock: Sessions timeout automatically after inactivity.
Transform any standard USB flash drive into a highly secure, cross-platform encrypted vault—no hardware encryption chips required.
- True Portability: Initialize a USB drive on your PC, unplug it, and securely unlock your files on any Windows, macOS, or Linux machine running QRE.
- Multi-Vault Architecture: QRE’s Rust backend functions as a dynamic Key Manager, securely holding multiple active
MasterKeysin isolated memory environments simultaneously. - Ghost-File Protection (NAND Defense): Because flash memory hardware uses wear-leveling algorithms that leave deleted plaintext data forensically recoverable, QRE enforces a safe "Encrypt locally, copy securely" workflow, warning you before you encrypt directly on a USB.
- Sudden Ejection Watcher: If a malicious actor (or clumsy user) physically yanks the unlocked USB drive out of the machine, a dedicated Rust background thread instantly detects the hardware removal and zeroes the Master Key from RAM.
- Evil-Maid Verification: During initialization, a unique Vault UUID is generated. Every time you unlock the drive on a new computer, the UUID is displayed, allowing you to verify out-of-band that an attacker hasn't stealthily swapped your USB's keychain file.
# 1. Install Dependencies
npm install
# 2. Run in Dev Mode
npm run tauri dev
# 3. Build for Release
npm run tauri buildQRE Toolkit follows a strict Zero-Knowledge architecture. If you lose your Master Password AND your Recovery Code, your data is mathematically inaccessible. There is no "Password Reset" button because there is no server. Backup your keychain.json file safely.
QRE Privacy Toolkit maintains rigorous, automated cryptographic and UI testing to guarantee safety across updates.
Rust Backend (cargo test):
- 83 tests passed from 83 total (Covers memory wiping, file routing, steganography math, Zip-Bomb prevention, and AES-GCM streaming integrity).
Frontend (npm test):
- Vitest/Jest suite covering UI state, ReDoS-safe regex heuristic parsing, and password strength algorithm boundaries.
License: MIT | Copyright: © 2026 Project QRE
