Zero-knowledge encrypted notepad, no account, no ads

4•thesecurenote•3w ago

I built a zero-knowledge encrypted notepad where all encryption happens client-side using AES-256-GCM. The server never sees your password or plaintext data.

How it works: - Pick any URL (thesecurenote.com/ {anything}) - Write your notes - Create a password on first save - Your notes are encrypted in the browser before being stored

Key features: - End-to-end encrypted - Multiple sections per notebook - No account, no email, no tracking - Open source client - Free forever tier

Would love feedback on the UX and any security concerns you might spot!

Comments

eimrine•3w ago

That is a brilliant idea. I wish you to put enough ads to survive because I hate giving my credentials to some privnote service. I will promote your service in local CP community to replace the old instrument.

skvmb•2w ago

Uhh...what the fuck?!

eimrine•2w ago

Don't be a fool. Censourship must die. If you are csam supporter then just read any literature from Ancient Greece/Rome - this is just a modern quirk.

Privavault•2w ago

The zero-knowledge architecture is clever here. One thing I'd be curious about—how do you handle key derivation from the passphrase? I've been building PrivaVault (encrypted doc management, launching in a week) and spent far too much time on this exact problem. We ended up using Argon2id with high iteration counts, but it creates this tension between security and UX since key derivation on every decrypt can feel sluggish on mobile. I would be interested in understanding the tradeoffs you made in this situation.

Study confirms experience beats youthful enthusiasm

The Big Hunger by Walter J Miller, Jr. (1952)

The Genus Amanita

We have broken SHA-1 in practice

Ask HN: Was my first management job bad, or is this what management is like?

Ask HN: How to Reduce Time Spent Crimping?

KV Cache Transform Coding for Compact Storage in LLM Inference

A quantitative, multimodal wearable bioelectronic device for stress assessment

Why Big Tech Is Throwing Cash into India in Quest for AI Supremacy

How to shoot yourself in the foot – 2026 edition

Eight More Months of Agents

From Human Thought to Machine Coordination

The new X API pricing must be a joke

Show HN: RMA Dashboard fast SAST results for monorepos (SARIF and triage)

Show HN: Source code graphRAG for Java/Kotlin development based on jQAssistant

Python Only Has One Real Competitor

Tmux to Zellij (and Back)

Ask HN: How are you using specialized agents to accelerate your work?

Passing user_id through 6 services? OTel Baggage fixes this

DavMail Pop/IMAP/SMTP/Caldav/Carddav/LDAP Exchange Gateway

Visual data modelling in the browser (open source)

Show HN: Tharos – CLI to find and autofix security bugs using local LLMs

Oddly Simple GUI Programs

The New Playbook for Leaders [pdf]

Interactive Unboxing of J Dilla's Donuts

OneCourt helps blind and low-vision fans to track Super Bowl live

Rudolf Vrba

Autism Incidence in Girls and Boys May Be Nearly Equal, Study Suggests

Wellness Hotels Discovery Application

NASA delays moon rocket launch by a month after fuel leaks during test