Secure Note Sharer
Encrypt a private note with AES-256 and share it via a secure link. The note is decrypted in the recipient's browser — your text never leaves your device unencrypted.
How Encryption Works
Your note is encrypted with AES-256-GCM — the gold-standard symmetric cipher. A random 256-bit key is generated for each note. The encrypted ciphertext is encoded as Base64 and embedded in the URL. The decryption key is placed in the URL fragment (after the #) which browsers never send to servers — so neither this site nor any intermediary can read your note.
Security Properties
| Property | Detail |
|---|---|
| Cipher | AES-256-GCM (authenticated encryption) |
| Key derivation | PBKDF2 with SHA-256 (when passphrase used) |
| Key size | 256 bits |
| Server access | None — key never sent to server |
| Tamper detection | Yes — GCM authentication tag |
Limitations
The encrypted note is stored in the URL itself, which means it travels wherever the link goes. The link does not self-destruct — once created, anyone with the link can decrypt it until it is deleted from the recipient's browser history. For truly ephemeral notes, use a server-side one-time-secret service.