Notes nobody else can read.
Jotura is an end-to-end encrypted notes app. Your notes live as plain files on your own computer, and when they sync, they are encrypted before they leave. The server passing them along sees only ciphertext.
Private by design, not by policy.
Encrypted before it leaves.
Every note is encrypted on your device, with keys derived from a password only you know. The server stores ciphertext it cannot read. Not your words, not your titles, not even your folder names.
A recovery phrase, not a reset button.
Your sync key backs up as a standard recovery phrase you write down once. There is no password reset that quietly lets someone else in, because there is nobody upstream who holds your keys.
No tracking. None.
No analytics, no telemetry, no anonymous usage data, no ads, no email capture on this site. Jotura touches the internet for one reason: syncing your encrypted notes, and only after you turn sync on.
Private, but never locked in.
On your own disk, notes are plain markdown files you can open with anything. Encryption protects them in transit and on the server, not from you.
Encrypted for exactly the people you invite.
Share a folder or a single note. It stays end-to-end encrypted to those people and nobody else, and everyone can edit. A privacy-first notes app does not have to be a lonely one.
More on encrypted shared notes and the full security design.
Common questions.
Can Jotura read my notes?
No. Notes are encrypted on your device before syncing, using keys derived from your password. The server only ever stores ciphertext, encrypted filenames included. Nobody at Jotura can read your notes, reset your password, or recover your data without your recovery phrase.
What encryption does Jotura use?
Keys are derived from your password with Argon2id, each file is encrypted with its own key, and file paths are protected too, so the server cannot even see what your notes are called. The full design is documented on the security page.
Do I need an account to use Jotura?
No. The app works fully offline with no account, forever. You only sign in if you turn on encrypted sync, and that uses a passwordless email link.
What happens if I lose my password?
Your recovery phrase restores access. If you lose both the password and the phrase, your synced data is unrecoverable by design: that is what end-to-end encryption means. Your local files on disk remain readable either way.
Is Jotura open about its security design?
Yes. The threat model, the crypto stack, and exactly what the server can and cannot see are published on the security page in plain English.
Free, no account needed. Add encrypted sync whenever you want it, £4 a month.