Loading…

Beta

Unlock your vault

Enter your vault password. It starts as the password you created the account with, and you can change it in Settings. Notes decrypt on this device.

Notes are encrypted on your device before sync. We only store scrambled data — we cannot read your notes (unless you send text to Ask AI with Ollama Cloud).

Encrypted on this device

Vault password

Having trouble on iPhone?

If notes will not open, use the vault password from the device where you created them. Password help is in Settings after you unlock. Write to if you are stuck.

Start writing

Notes stay encrypted on this device. Start with a blank note.

Attachments

Add file

Version history

Each pause saves a version. One burst of typing stays together.

Settings

Account

Pro

Free during public beta

Backups, security extras, and room to grow

Your password is the only key. Deeperguard can't recover your notes if you forget it.

Checking privacy status…

Technical details

Compare Free, Basic & Pro

Signed-in devices

Devices currently signed in to this account (Settings > Devices). New sign-ins appear here until you approve them or deny to sign that device out. Sign-in never waits on approval — use Approve or Deny when you are ready.

Appearance

Notes

Font size Compact note list Hide list previews

On iPhone, PDF note-list thumbnails are generated on this device and cached locally.

Monospace editor Spellcheck Open notes in preview (documents & markdown)

When off, existing notes open ready to edit. New scans still open on the document preview.

Auto-open PDF-only notes

When a note has no text and one PDF, open the PDF preview instead of a blank editor. Preview runs in your browser — the file isn't sent to our servers.

Previews, font, editor and lock settings follow your account: change them here and every signed-in device picks them up on the next sync. Note list sort is in the list header (or under Views on phone).

Storage on this device

Download files only when a note is opened

Notes, tags and scanned text always sync. With this on, photos and PDFs stay on the server until you open their note — then they are kept on this device for offline use. Applies to this device only.

AI chat (optional)

Less private. Chat sends the text of the note you have open (and, if enabled, its scanned text) from this browser to the Ollama server below. That text leaves the end-to-end encrypted vault. Nothing else is sent: no other notes, tags, file names, e-mail address or passwords. With your own Ollama server the browser talks to it directly. With Ollama Cloud our server relays the request to ollama.com (browsers cannot call it directly); the relay forwards and forgets — it does not store your API key, the prompt, or the answer. Ollama’s privacy page (checked 25 Oct 2026) states that cloud prompts are processed transiently, not stored beyond fulfilling the request, and not used to train models. Do not use it on notes you would not paste into a chatbot.

Ollama server

Leave empty for Ollama Cloud. For your own server enter its URL (it must be reachable over HTTPS from this browser and allow this origin via OLLAMA_ORIGINS).

Ollama API key

Create a key at ollama.com/settings/keys. It is stored inside your encrypted vault and synced to your other devices; it is never saved unencrypted on this device.

Model

Default is the cloud model gpt-oss:120b. Any model from ollama.com's cloud library works; on your own server use a model you have pulled.

Include scanned document text

Secure Send

Send an encrypted note or file by link. The key stays in the URL fragment; the server stores ciphertext only.

Privacy & security

Notes are encrypted on this device before sync. Your account password and vault password start as the same password. Sign-in proves who you are. The vault password decrypts notes on this device and never leaves it. You can change the vault password below. We cannot recover it. Account sign-in uses zero-knowledge SRP — the server stores only a proof, not your password.

See what the server sees per action, how to verify in DevTools, or use View server copy on a note, file, 2FA entry, folder, or tag.

Self-hosting? See the self-host guide.

Use https://www.deeperguard.com/ on iPhone. Passkeys require that hostname.

Lock after idle Lock when leaving the app Remember password on this device

Saves the vault password on this device so offline unlock can use it after you type it. Opening Notes still asks for the password every time — it is not filled in for you. Disable on shared devices.

Device phrase

Shown on this device before you type your password. Stored only in this browser — never sent to the server. Helps you spot a fake sign-in page.

Passkeys sign you into your account without typing your account password. Vault unlock still requires your master password on this device — passkeys do not replace it.

Passkey-only account sign-in

Waiting period before new recovery codes work

Recovery codes are a last resort for account sign-in. A waiting period always applies (at least 72 hours). Requesting new codes resets the wait. Any signed-in device can cancel a pending batch. Recovery help

Disable password sign-in

Current vault password New vault password Confirm new password

Re-encrypts every note on this device. Other devices need the new password to sync.

Advanced

Previous vault password (for repair)

Re-OCR documents on this device (zero-knowledge). Regenerates PDF list thumbnails on iPhone.

Backup & import

Back up

Encrypted on this device with your vault key. Destinations never see plaintext or keys.

Downloads deeperguard-backup-YYYY-MM-DD.dgbackup (on iPhone: Save to Files → iCloud Drive).

Google Drive: Not set up yet — add your own key

Google OAuth Client ID

How to get this

Open the Google Cloud Console and create (or select) a project.
Configure the OAuth consent screen first (Google Auth Platform): app name, support email, Audience → External, and add yourself as a test user. Do this before creating a client.
Enable the Google Drive API for that project.
Create an OAuth client of type Web application. Leave redirect URIs empty.
Add authorized JavaScript origin: https://www.deeperguard.com
The app requests only the drive.file scope. If the consent screen is in Testing, you must be listed as a test user.
Copy the Client ID (ends with .apps.googleusercontent.com). No client secret is used.

Dropbox: Not set up yet — add your own key

Dropbox App key

How to get this

Open the Dropbox App Console and create an app.
Choose Scoped access and App folder.
Add redirect URI: https://www.deeperguard.com/app
On the Permissions tab, tick files.content.write and files.content.read, then click Submit before first use (changing permissions later requires reconnecting).
Copy the App key only — never the app secret (browser PKCE does not use it).

Sends the same encrypted .dgbackup to your verified backup address.

Backup email Daily encrypted email backup

Email backups are sent only after this address is verified with a code.

Export

Saves the open note as a file on this device.

Restore & import

Restore Deeperguard backup Import from Standard Notes

Restore accepts .dgbackup (and legacy .enc.json) Deeperguard backups. Import from Standard Notes accepts encrypted or decrypted SN exports (zip or .txt).

pCloud backup

Optional encrypted vault sync via rclone to your pCloud account.

pCloud email / username pCloud password rclone OAuth token (if 2FA is on) Remote folder pCloud region Daily encrypted pCloud sync

Uploads encrypted vault backups via rclone. Password + WebDAV works when pCloud two-factor authentication is off. If 2FA is enabled, run rclone authorize pcloud on your computer (EU: add --pcloud-hostname eapi.pcloud.com) and paste the token here.

About

Notes ve55d7bd8

Client code hash (SHA-256 of the shipped JS/CSS manifest):

79e69401998dca41902f8a62f0922bdcdfda20e0170c45fce35632ea71f00d81

Checking signed release…

After load, the browser re-fetches same-origin assets from client-manifest.json, hashes them with SubtleCrypto (canonical manifest_sha256 form), and compares that computed value to manifest_sha256 on the GitHub Release v0.65.26 (public Releases API — not this server). The shell meta above is only a convenience mirror; a mismatch with the computed hash is flagged. A match proves the hashed assets equal that release’s published hash — not Sigstore verification. Loaded <script>/<link> URLs are cross-checked against the manifest (unlisted assets fail the check). Requests time out rather than hanging. This checker script is itself served by the same origin, so independent verification still means cosign or rebuilding from source (see /verify). This release publishes a Sigstore bundle.

GitHub Release How to verify

A pinned build (browser extension or desktop app) is the strongest option if one is published later — the web app still depends on the origin delivering these assets.

Danger zone

Secure Send

Send an encrypted note and optional file. The key is in the link itself and never reaches our server. The link stops working after the set number of opens or 7 days.

Title Note

Optional file (max 50 MB)

Optional passphrase (share separately from the link) Number of opens

Default 1. The link stops working after this many opens or 7 days.

Expires (days, max 7)

Unlock your vault

Start writing

Attachments

Version history

Secure Send

Note

View server copy

Server JSON (as stored)

Decrypted on this device

Add document

Add 2FA account

Manage tags

Account info

Scan → search → find

New folder

Confirm

Send to Ask AI

Document