My Memo

End-to-end encrypted — the server only ever sees ciphertext

• 12 English words generate a key that only you hold
• Notes are encrypted before they touch disk; the server receives ciphertext only
• Enter the same words on another device to restore everything

Encryption: the phrase runs through PBKDF2-SHA256 (600,000 rounds) to a master key, HKDF splits it into a note key and a backup ID, and each note is sealed with AES-256-GCM bound to its own ID — moving the ciphertext elsewhere makes decryption fail.

What the server sees: ciphertext, its size, the upload time, and your IP. It never sees titles, bodies, how many notes you have, or anything needed to decrypt them.

What you must accept: lose the phrase or miscopy a word and the notes are gone for good — we cannot help. If the browser is compromised, or you choose to remember the key on a shared machine, plaintext is readable while unlocked.