SecureVault • v5.4.9 • 6-Layer Encryption

SecureVault Firmware Installer

Install SecureVault directly from your browser using ESP Web Tools. No PlatformIO, no IDE, no command line required.

ECDH P-256 HKDF-SHA256 AES-256-GCM Method Tunneling Traffic Obfuscation Secure Zeroing

Flash Firmware

Connect your ESP32-S3 device via USB and click Connect.

Connect Device

GPIO Configuration

Configure hardware pin mappings for custom boards, or use the default EdgeHax S3-PRO mapping.

EdgeHax S3-PRO Default Pinout

No extra steps needed. Flash the firmware using the Connect Device button above and the default EdgeHax S3-PRO pin mapping will be used automatically.

TFT_CS4
TFT_RST5
TFT_DC7
TFT_MOSI15
TFT_CLK16
TFT_MISO39
TOUCH_CS14
T_DO41
RTC_SDA1
RTC_SCL2
LADDER_PIN6
TOUCH_PIN40
BUZZER_PIN38
SD_CS10
SD_MOSI11
SD_SCK12
SD_MISO13
I2S_MCLK9
I2S_SDIN38
I2S_LRCLK21
I2S_BCLK42
Only change pins that differ from the defaults. Unchanged pins will use the EdgeHax S3-PRO mapping automatically.
Only change pins that differ from the defaults. Unchanged pins will use the EdgeHax S3-PRO mapping automatically.
Display (ILI9341 TFT)
default: 4
default: 5
default: 7
default: 15
default: 16
default: 39
Touch (XPT2046)
default: 14
default: 41
🔌 I2C Bus
default: 1
default: 2
default: 0x68 (104)
default: 0x69 (105)
default: 0x57 (87)
default: 0x40 (64)
🎧 Input / Output
default: 6
default: 40
default: 38
💾 SD Card
default: 10
default: 11
default: 12
default: 13
🎵 I2S Audio
default: 9
default: 38
default: 21
default: 42

GPIO Config Generated Successfully

Download gpio_cfg.bin
Flash the GPIO config to your device:
esptool.py --chip esp32s3 --port /dev/ttyACM0 write_flash 0x410000 gpio_cfg.bin

Note: This flashes only the GPIO configuration, not the firmware. Flash the firmware separately using the Connect Device button above. The GPIO config will take effect after the next reboot.

View raw hex dump

Supported Hardware

Board:

EdgeHax ESP32-S3 S3-PRO (N16R8)


Chip Family:

ESP32-S3 Dual-Core • 16MB Flash • 8MB PSRAM


Display:

ILI9341 320x240 TFT + XPT2046 Touch

Installation Steps

  • Connect the device using a USB data cable (not a charging cable).
  • Open Chrome, Edge, Brave, or Opera.
  • Click the Connect Device button above.
  • Select the ESP32 serial port from the browser prompt.
  • Allow firmware installation to proceed.
  • Wait for flashing to complete (~30 seconds).
  • The device will reboot automatically.
  • Default PIN is 1234 — change it in Settings.

6-Layer Security

  • Layer 1: ECDH P-256 key exchange
  • Layer 2: HKDF-SHA256 session key derivation
  • Layer 3: AES-256-GCM per-message encryption
  • Layer 4: Sequential nonces (replay protection)
  • Layer 5: Method tunneling (obfuscated envelopes)
  • Layer 6: Traffic padding + chaff (pattern hiding)

Browser Compatibility

  • Google Chrome (recommended)
  • Microsoft Edge
  • Brave Browser
  • Opera Browser
  • Web Serial API support required

Firefox and Safari do not support Web Serial API yet.

Important Notes

  • Use a USB data cable (charging cables won't work).
  • Close PlatformIO Serial Monitor or Arduino IDE before flashing.
  • Disconnect other serial tools (PuTTY, minicom, etc.).
  • Do not unplug during flashing.
  • Use direct USB ports (avoid USB hubs if possible).
  • If the button doesn't appear, check browser Web Serial support.

Troubleshooting

  • Try a different USB cable (many cables are power-only).
  • Install CP210x or CH340 USB-serial drivers on your OS.
  • Refresh the browser page and reconnect.
  • Hold BOOT button while connecting to enter bootloader mode.
  • Verify manifest.json loads correctly in the browser.
  • Verify BIN file paths in manifest.json are accessible.
  • Check that your board is ESP32-S3 (not ESP32 or ESP32-C3).

After Flashing

  • Default unlock PIN is 1234.
  • Change it immediately in Settings → Change PIN.
  • BLE HID typing works out of the box — pair from your phone.
  • AP Mode: tap mode badge → AP MODE for WiFi management.
  • Dashboard: tap mode badge → DASHBOARD for Electron app.