How to Open Cloud Space on a Computer (QR Sign-In)

To open your Cloud Space on a computer, go to space.mynotevault.in in an up-to-date browser, choose Open Cloud Space, then Sign in with your phone instead. On your Android phone, open My NoteVault, your vault and the Cloud Space tab, tap Devices and activity (the sliders icon), then Link a browser, and scan the QR code on the computer's screen. When both screens show the same six-digit code, confirm on the phone, and the browser opens your files. You can also sign in with your access file and secret phrase.

What do I need before I start?

A phone that is already connected. The QR code works because your phone already holds the keys to your Cloud Space and hands them to the browser. If your phone isn't connected, sign in with your access file instead (see below).
The phone's camera, to scan the code.
A computer with an up-to-date browser. There is no desktop app: space.mynotevault.in is the computer version of Cloud Space, and it is in the app's 13 languages.

On the computer, open space.mynotevault.in, choose Open Cloud Space, then Sign in with your phone instead. A QR code appears. It works for 5 minutes.
On the phone, open My NoteVault, then your vault, then the Cloud Space tab.
Tap Devices and activity (the sliders icon), then Link a browser.
Scan the code on the computer's screen.
Both screens now show the same six-digit code. Check that the codes match and that the computer's address bar shows space.mynotevault.in, then tap Yes, link the browser on the phone.
The phone confirms that it sent the keys, end-to-end encrypted, and the browser finishes signing in.

One browser can be connected at a time. If your Cloud Space is already open in another browser, the computer asks whether to use this browser instead. Continuing signs the other browser out, and your phone stays connected.

How can a QR code sign me in without a password?

Your phone doesn't send a password. It sends your keys, encrypted so that only the browser that showed the QR code can open them.

The QR code carries a one-time secret and a public key that the browser made for this sign-in only.
The phone and the browser use them to agree on a shared key (X25519 key agreement). The phone encrypts your keys with it (AES-256-GCM), and the server passes them to the browser. The server relays only the phone's public key and the encrypted keys. It never sees the secret in the QR code, so it cannot open what it passes on.
Each device works out the six-digit code from the shared key. Matching codes mean your phone is talking to the browser that showed the QR code, with nobody in between.
A QR code works once, for 5 minutes. If someone else scans it first, your phone tells you, and you show a new code.

Then the browser signs in the same way the app does: it signs a one-time challenge with your key (an Ed25519 signature), so neither a password nor your phrase ever crosses the network.

Why should I only scan a code shown on space.mynotevault.in?

Matching codes prove that your phone is talking to the page that showed the code, not that the page is the real one. A look-alike site could show its own QR code, and the codes would still match. So check the address bar before you tap Yes, link the browser; the app reminds you on that screen.

For the same reason, never scan a QR code that someone sends you or shows you on their own screen. Confirming it would send your keys to their browser.

On space.mynotevault.in, choose Open Cloud Space, drop your access file (MyNoteVault-<Vault ID>.vaultkey) on the page or choose it, type your secret phrase exactly as you created it and choose Unlock; spaces and capitals count. Any file name works, because the page checks the file's contents.

This way doesn't need your phone, so it is also your way back in if the phone is lost or broken. Nobody, MyNoteVault included, can recover a lost access file or a forgotten phrase, so keep both safe: Private Cloud Backup for Photos and Documents on Android explains how.

What can I do with my files in the browser?

You can upload, preview and download files, make folders, rename, move and sort. The browser encrypts each file before it uploads it and decrypts it when you open it. File names and folders are encrypted too, so the servers keep ciphertext, sizes and dates only. Nothing streams: the browser downloads the whole encrypted file and decrypts it in memory, so a large file opens only once that has finished.

Your phone and your computer use the same Cloud Space, but each shows the file list from when it last loaded, not live. A file you upload from the computer appears in the app's Cloud Space tab after you pull down to refresh, where you can open it or choose Save to Local Vault to keep a copy in your vault. A file you upload from the phone appears in the browser when you open Files again.

Uploads need an active plan. When a plan ends, uploads stop, and opening, downloading and deleting keep working for a 30-day grace period. How Cloud Space plans, renewals and size changes work covers what to do before then.

How do I stay safe on a shared or public computer?

Prefer the QR code. You don't copy your access file onto that computer or type your phrase on its keyboard.
Lock when you're done. Choose Lock, or close the tab. Your keys are held only in the tab's memory, and either one removes them. The app may still list the browser as connected until you sign it out.
Delete what you downloaded. A downloaded file is a readable copy on that computer.
Sign the browser out from your phone if you can't get back to the computer. In the app, Devices and activity lists the connected browser; choose Sign out on it. That ends its session at once. To connect again, the browser needs your access file and phrase, or a new QR sign-in with your phone.
Check the activity history. It is under Activity in the browser and in the app's Devices and activity screen. It records sign-ins and device changes, and it can't be edited or deleted.

A shared computer can still expose what you open on it, for example through malware or a browser extension, so use your own computer for files that matter.

How do I link a new phone from the computer?

The QR code also works the other way round, so you can connect a new phone without copying the access file to it.

On the computer, open Devices and choose Link a phone with a QR code (it reads Link a different phone while another phone is connected), type your secret phrase and choose Show QR code.
On the new phone, install My NoteVault, open your vault and its Cloud Space tab, tap I already have Cloud Space, then Scan a QR code, and scan the code.
The phone shows a six-digit code. Check that the computer shows the same code, and confirm it there.

One phone can be connected at a time. If another phone is connected, the new phone asks Use this phone instead?; choose Use this phone, and the other phone is signed out. Your files stay in Cloud Space; choose Save to Local Vault for the ones you need on the new phone.

What if the QR code doesn't work?

"This code expired or was cancelled." A code lasts 5 minutes. Show a new code in the browser and scan it again.
"Someone else already scanned this code." Show a new code and scan it again. If you didn't scan it twice yourself, make sure nobody else can see your screen.
The codes don't match. Cancel and start again: someone else may have scanned the code.
"This isn't a MyNoteVault code." The phone scanned a different QR code. Scan the one in the browser.
"The camera isn't available." Allow camera access for My NoteVault in the phone's Settings, or sign in with your access file.

Is there a desktop or iPhone app?

No. On a computer, Cloud Space runs in the browser at space.mynotevault.in, with nothing to install. On a phone, it is part of My NoteVault for Android; there is no iPhone app.