ciphernotes

Ciphernotes is an end-to-end encrypted notebook that keeps your text safe even when it syncs through the cloud. Every note is encrypted before it leaves your device, so the server only sees ciphertext.

Key features:
- Open source backend and frontend so you can self-host or review how your data is handled.
- Works completely offline.
- Text and files are encrypted before they're synced.
- No ads, no trackers, no unnecessary cookies.
- No account required for local use.
- Syncs immediately across all platforms.
- Dark- and Light-Mode.
- Todo lists with sub-tasks.
- Import and view images and videos.
- Import files of any type.
- Organize with labels.
- Google Keep import.
- Export notes as JSON.
- Fully keyboard navigatable.
- Keyboard shortcuts, open notes with cmd+k or ctrl+k.
- Text-editor with multi-cursor support and other shortcuts.
- Archive unused notes.
- Share encryption key via QR-Code directly from app to app

Ciphernotes is a PWA hosted on https://ciphernotes.com the Android app bundles the assets and serves them locally using a WebView.

Encryption:
- Encrypted in transit/storage from the server’s perspective. Notes are decrypted locally, edited locally, then encrypted before sync/upload.
- Not encrypted at rest inside the app/device. Local IndexedDB data stores plaintext notes and decrypted file blobs.
- Device compromise exposes notes. Malware, physical device access, malicious extensions (web version), or WebView data extraction can read plaintext local data and the key.
- Server/operator compromise alone should not expose note contents.