Notes nobody else can read.
Jotura is an end-to-end encrypted notes app. Your journal, your therapy notes and the draft you would never show anyone live as plain files on your own computer. When they sync, they are encrypted before they leave, so the server passing them between your devices sees only ciphertext.
Private because of how it is built.
- Encrypted before it leaves your device.
- Every note is encrypted on your device with keys derived from a password only you know. The server stores ciphertext it cannot read, and that covers your titles and folder names as well as the words inside.
- You keep the only way back in.
- Your sync key backs up as a standard recovery phrase you write down once and put somewhere safe. There is no password reset that quietly lets someone else in, because there is nobody upstream who holds your keys.
- Nothing in the app watches you.
- The app sends no analytics, telemetry or anonymous usage data, and it shows no ads. Your notes leave your device only when you turn sync on, and then only as ciphertext.
- Your files still open anywhere.
- On your own disk, notes are plain markdown files you can open with any editor you like. Encryption guards them in transit and on the server, and it never stands between you and your own files.
Common questions.
- Can Jotura read my notes?
- No. Notes are encrypted on your device before syncing, using keys derived from your password. The server only ever stores ciphertext, encrypted filenames included. Nobody at Jotura can read your notes, reset your password, or recover your data without your recovery phrase.
- What encryption does Jotura use?
- Keys are derived from your password with Argon2id, each file is encrypted with its own key, and file paths are protected too, so the server cannot even see what your notes are called. The full design is documented on the security page.
- Do I need an account to use Jotura?
- No. The app works fully offline with no account, forever. You only sign in if you turn on encrypted sync, and that uses a six-digit code we email you, with no password to remember.
- What happens if I lose my password?
- Your recovery phrase restores access. If you lose both the password and the phrase, your synced data is unrecoverable by design: that is what end-to-end encryption means. Your local files on disk remain readable either way.
- Is Jotura open about its security design?
- Yes. The threat model, the crypto stack, and exactly what the server can and cannot see are published on the security page in plain English.
Private, and free.
The app costs nothing and works offline. Sync is the only thing you pay for.
You need no account to start, and you can add encrypted sync for £4 a month whenever you want it.