Beta

Unlock your vault

Enter your vault password. Notes decrypt on this device.

Notes are encrypted on your device before sync. We only store scrambled data — we cannot read your notes.

Encrypted on this device

Start writing

Notes stay encrypted on this device. Start with a blank note.

Attachments

Add file

Version history

Settings

Account

Pro

Free during public beta

Backups, security extras, and room to grow

Checking privacy status…

Compare Basic & Pro

Signed-in devices

Devices currently signed in to this account. Sign out a device to end that session and delete its local vault copy when it next connects.

Appearance

Notes

Font size Compact note list Hide list previews

On iPhone, PDF note-list thumbnails are generated on this device and cached locally.

Monospace editor Spellcheck Open notes in preview (documents & markdown)

When off, existing notes open ready to edit. New scans still open on the document preview.

Previews, font, editor and lock settings follow your account: change them here and every signed-in device picks them up on the next sync. Note list sort is in the list header (or under Views on phone).

Storage on this device

Download files only when a note is opened

Notes, tags and scanned text always sync. With this on, photos and PDFs stay on the server until you open their note — then they are kept on this device for offline use. Applies to this device only.

AI chat (optional)

Less private. Chat sends the text of the note you have open (and, if enabled, its scanned text) from this browser to the Ollama server below. That text leaves the end-to-end encrypted vault. Nothing else is sent: no other notes, tags, file names, e-mail address or passwords. With your own Ollama server the browser talks to it directly. With Ollama Cloud the Deeperguard server relays the request to ollama.com (browsers cannot call it directly); the relay forwards and forgets, it stores neither your key, the prompt nor the answer. Ollama Cloud states it processes prompts transiently and never logs or trains on them. Do not use it on notes you would not paste into a chatbot.

Ollama server

Leave empty for Ollama Cloud. For your own server enter its URL (it must be reachable over HTTPS from this browser and allow this origin via OLLAMA_ORIGINS).

Ollama API key

Create a key at ollama.com/settings/keys. It is stored inside your encrypted vault and synced to your other devices; it is never saved unencrypted on this device.

Model

Default is the cloud model gpt-oss:120b. Any model from ollama.com's cloud library works; on your own server use a model you have pulled.

Include scanned document text

Privacy & security

Notes are encrypted on this device before sync. Your vault password never leaves this device. Account sign-in uses zero-knowledge SRP — the server stores only a proof, not your password.

Self-hosting? See the self-host guide.

Use https://www.deeperguard.com/ on iPhone. Passkeys require that hostname.

Lock after idle Lock when leaving the app Remember password on this device

Stores your vault password on this trusted device for offline unlock. Disable on shared devices.

Passkeys sign you into your account without typing your password. Vault unlock still requires your master password locally.

Current vault password New vault password Confirm new password

Re-encrypts every note on this device. Other devices need the new password to sync.

Advanced

Previous vault password (for repair)

Re-OCR documents on this device (zero-knowledge). Regenerates PDF list thumbnails on iPhone.

Backup & import

Backup email Daily encrypted email backup

Import Standard Notes or Deeperguard backup

Encrypted backups only. Standard Notes decrypted exports can be imported from zip or .txt.

pCloud backup

pCloud email / username pCloud password rclone OAuth token (if 2FA is on) Remote folder pCloud region Daily encrypted pCloud sync

Uploads encrypted vault backups via rclone. Password + WebDAV works when pCloud two-factor authentication is off. If 2FA is enabled, run rclone authorize pcloud on your computer (EU: add --pcloud-hostname eapi.pcloud.com) and paste the token here. Credentials stay in keys/, not the database.

Unlock your vault

Start writing

Attachments

Version history

Note

Add document

Add 2FA account

Manage tags

Account info

Scan → search → find

Confirm

Document