How Notes Works

Notes is a markdown editor where every note lives in the browser URL. There is no database, no account, and no server storage. Your content is compressed and encoded directly into the URL hash fragment — the part of the URL that browsers never send to servers.

Share a note by copying the link. Anyone with the URL can read it. Encrypt sensitive notes with a password using AES-256-GCM. All encryption happens in your browser — the server never sees your content or your password.

Notes works offline. It's a Progressive Web App — install it once and use it anywhere, even without an internet connection.

Encrypted notes use AES-256-GCM authenticated encryption, with keys derived from your password using PBKDF2 with 600,000 SHA-256 iterations. Every note gets a unique 16-byte salt and 12-byte initialization vector (IV).

The encrypted payload — salt, IV, and ciphertext — is base64url-encoded into the URL hash. Without the password, the URL contains only binary noise. The GCM authentication tag prevents tampering — any modified encrypted payload will fail to decrypt.

Your password is cached locally for convenience (keyed by a hash of the per-note salt) and never sent to any server. Share passwords through a separate channel — there is no password recovery.