Encrypted Notes Online
Your notes contain your most private thoughts, plans, and ideas. They deserve the same level of protection as your banking credentials. xNotePadAI encrypts every note with AES-256-GCM in your browser — no server ever sees your content in plain text.
AES-256-GCM
The gold standard of symmetric encryption. 256-bit keys with Galois/Counter Mode for authenticated encryption — tamper-proof and unbreakable.
PBKDF2 Key Derivation
Your password goes through 600,000 rounds of PBKDF2-SHA256 to generate the encryption key. Brute-force attacks are computationally infeasible.
No Account Required
Start writing immediately. No email, no registration, no personal information. Notes are stored in your browser's localStorage by default.
Encrypted Sync
Optionally sync across devices. Notes are encrypted before upload — the sync server stores only ciphertext with SHA-256 integrity checksums.
Offline-First PWA
Works without an internet connection. Encrypted notes live locally in your browser. No cloud dependency for reading or writing.
Version History
Five versions of every note are kept automatically. Compare changes, restore previous states — all versions encrypted with the same key.
How does this compare to Google Keep?
Google Keep stores your notes on Google's servers in plain text. Google can read every note, and frequently does for targeted advertising and AI training. xNotePadAI encrypts everything client-side — no one can read your notes except you, not even with a court order to the server operator.
No signup. AES-256 encryption active from your first keystroke.
Frequently Asked Questions
Can I verify the encryption is real?
Yes. Open your browser's developer tools and inspect the network requests during sync. You will see only encrypted payloads — no readable text leaves your browser.
What if the service shuts down?
Your notes are in your browser's localStorage. You always have them locally. The Recovery Kit feature lets you export an encrypted backup file you control independently of the service.
Is AES-256-GCM really unbreakable?
With current technology, yes. Breaking AES-256 by brute force would require more energy than exists in the observable universe. Combined with PBKDF2 key derivation, even weak passwords become computationally expensive to attack.
Do I need to pay for encryption?
No. Encryption is the default for all users. There are no paid tiers or premium features. Every user gets AES-256-GCM encryption at no cost.