Zero-knowledge means we can't read your notes.
Not "we promise not to look". We technically cannot. The key stays with you, so we can't read an encrypted note, and we couldn't hand it over to anyone else either.
In plain terms
Encrypted content is locked in your browser before it is sent anywhere. What travels to our servers, and what we store, is already scrambled. We never receive the key that unlocks it.
That applies to everyone: us, our staff, a hacker who got into our servers, or an authority that asks us for your data.
Lock part or all of a note
You don't have to encrypt everything. Lock a single paragraph, like an alarm code or a password hint, and leave the rest of the note searchable. Or lock the whole note.
How it works
- Choose what to encrypt and set a passphrase.
- Your browser locks the content. Only the scrambled version leaves your device.
- To read it again, you enter the passphrase and your browser unlocks it.
One important thing
Keep your passphrase safe
Because we never hold your key, we can't reset it or recover it for you. If you lose a passphrase, that encrypted content is gone for good. That is the price of real privacy.
Encryption on every plan
Full zero-knowledge encryption is included on the free plan too. Privacy isn't a paid upgrade.
Common questions
Can encrypted text be searched?
Encrypted content is hidden from our servers, so it can't be searched the way normal notes are. Text you leave unencrypted stays searchable.
Can you recover my passphrase?
No. We never have it.
Can I use my own storage as well?
Yes. Paid plans can use your own AWS S3 bucket. See the your data page.