Nooto

Nooto is a note-taking app that keeps your notes private. Everything is encrypted on your device before it ever leaves it, using AES-256-GCM encryption with keys derived locally via Argon2id. Nobody but you, not even the server operator, can read your notes.

Features:

Notes are encrypted on-device before sync; the server only ever sees ciphertext

Works fully offline, no account required to use the app locally

Optional sync across devices, using the built-in public server or your own self-hosted instance

Folders, drag-and-drop organization, and a markdown editor

Fully open source and auditable

What the server stores: only an opaque note ID and ciphertext blobs for content and metadata. No readable title, no readable content, no plaintext of any kind.

Please note: Nooto is beta software and still under active development. The encryption design has not yet been reviewed by an independent security auditor. Use at your own discretion, and please report issues on the project's GitHub page.