Attachments

A page can carry images (PNG, JPEG, GIF, WebP, SVG) and PDFs. Attach from the toolbar, drag a file onto the page (the editor shows a frame where it will land), or paste an image. Every route opens the same dialog.

The one question

The dialog shows the file’s name and size and asks: encrypt this file?

• Unticked (the starting position): the file is stored as given under the folder’s _media/ directory and opens with anything.
• Ticked: the file is sealed with AES-256-GCM under the master key, opens only inside Claspt, and shows a small lock badge in the page.

Add a comment if the file name will not mean much later; it is shown with the file. The original file name is kept and shown too.

The choice can be reversed later from the rendered page, where a right-click also offers Save a copy and Delete.

Size limit

Each vault has a limit per attachment: 5 MB to start, adjustable from 1 to 25 MB under Settings › Security › Attachments. A file over the limit is not shrunk or refused silently: the dialog states both numbers and offers to raise the limit or, for an image, to resize it, showing the resulting size before anything is saved. Claspt never changes a file’s bytes on its own.

In the page

An image renders in place. A PDF appears as a chip with its name and comment and opens with a click. The same file attached twice is stored once.

Plainly

• Attachments are not encrypted by default; tick the box.
• The vault keeps its full version history, so a deleted attachment is in that history. The dialog says so every time.
• The phone shows images (encrypted ones opened in memory only) and lists PDFs, but cannot attach.