Work / 04
Secured Text
No-nonsense notes with end-to-end encryption. No account required.
— Notes
A notepad that needs nothing but a name and a password. Pick a site name, set a password, and your notes are available on any device.
How it works
Notes are encrypted in the browser with the user’s password before they’re saved. The server stores only the ciphertext against the site name, so a database leak reveals nothing readable.
To stop two devices from overwriting each other, every save includes a hash of the content it’s replacing. The server only accepts the update if that hash matches what it has.
What I’d change
The app is offline now. If I brought it back, I’d switch to the Web Crypto API with a slow password-based key derivation, and require proof of the password for every change, including deleting a site.