Create a Note
Encrypted Notes
Encrypted notes are stored as ciphertext so the server cannot read the contents. Only someone with the correct key or passphrase can decrypt and view the note.
How it works:
- The user enters note text and, if required, a passphrase.
- The client-side code derives a key from the passphrase and encrypts the note before sending it.
- The server receives and stores only the encrypted payload and any non-sensitive metadata.
- When the note is opened later, the client retrieves the encrypted data, derives the decryption key again, and decrypts the note locally.
The important part is that encryption and decryption happen on the client side. The server acts as a storage layer, not as a decryption service.
Common algorithms used for encrypted notes include AES-GCM or ChaCha20-Poly1305, often combined with a key derivation function like PBKDF2, Argon2, or scrypt to turn a passphrase into a strong encryption key.
Benefits:
- Confidentiality: only authorized users can read the note.
- Privacy: the server does not have access to plaintext data.
- Integrity: authenticated encryption helps detect tampering.