Write locally
Create notes in a focused editor and add files or folders as attachments.
Client-side encrypted notes
SecureNotes
A private notes workspace where note text, files, and folders are encrypted in your browser before they touch the server.
- Plaintext
- stays local
- Archives
- .enczip blobs
- Attachments
- encrypted too
Encrypt before upload
SecureNotes creates the zip archive and encrypts it on the front end.
No server-side plaintext
The backend stores opaque encrypted files instead of readable notes.
One archive, complete context
Notes and attachments travel together inside the protected archive.
Front-end encryption
Your note is protected before it leaves your screen.
Many note apps protect data after it arrives on their servers. SecureNotes moves the most important step earlier: the browser derives the key, encrypts the archive, and uploads only ciphertext.
Package the archive
The browser builds a zip with a required note.txt and the selected attachments.
Encrypt in browser
PBKDF2-SHA256 derives a 256-bit key and AES-256-GCM encrypts the zip payload.
Store ciphertext
The server receives an .enczip archive, not the plaintext note or master password.
The workspace
Private notes without hiding the workflow.
SecureNotes keeps the interface familiar: a sidebar of encrypted archives, a clean editor, one-click save, decrypted zip export, and attachment management for files or folders.
Why it stands apart
Designed around the encryption boundary.
SecureNotes treats the browser as the trusted place where notes are readable. The backend is just durable storage for encrypted archives.
| Capability | Typical note app | SecureNotes |
|---|---|---|
| Encryption boundary | Often after server receipt or only at rest. | Before upload, inside the browser. |
| Backend visibility | May process plaintext for sync, search, or previews. | Stores opaque .enczip files. |
| Attachments | Often separate from the note body. | Files and folders are encrypted inside the same archive. |
| Password model | Usually recoverable through account systems. | Master password is required; no recovery means fewer backdoors. |
Everyday secure workflow
Built for notes that come with context.
Write and revise
Edit directly in the browser, auto-save when switching notes, and keep the note archive name visible.
Attach evidence
Add documents, exports, logs, screenshots, or full folders to the same encrypted payload.
Export when unlocked
Download the encrypted archive for storage or export a decrypted zip when you intentionally unlock it.
Get started
Run SecureNotes locally.
SecureNotes is a self-hosted ASP.NET Core app with a React front end. Start it locally and open the app URL shown in the terminal.
PowerShell
dotnet run
Honest security
Strong privacy with clear boundaries.
SecureNotes keeps plaintext note content and the encryption password away from the backend. The master password is still the key to your archives: if it is lost, encrypted notes cannot be recovered.