Standard Notes is built from the ground up with security as a first-class priority. Every piece of data you create — notes, files, tags, and settings — is encrypted on your device before it reaches our servers.
Standard Notes uses the XChaCha20-Poly1305 encryption algorithm combined with Argon2id for key derivation. This means your data is encrypted with keys derived from your password that never leave your device. Even if our servers were compromised, your data remains unreadable without your password.
We have zero knowledge of your content. Our servers store only encrypted blobs of data. We cannot read your notes, files, or any application data — even if legally compelled to do so. Only you hold the decryption keys.
Standard Notes is fully open source. Our complete codebase is available on GitHub for anyone to inspect. We have completed multiple independent third-party security audits conducted by leading security firms, including:
Audit reports are publicly available, demonstrating our commitment to transparency.
Add an extra layer of security with application passcode lock, fingerprint, or Face ID authentication on mobile devices. Even if someone has access to your device, they cannot read your notes without your passcode.
Files attached to your notes are encrypted with the same end-to-end encryption protocol. Photos, documents, PDFs — everything is encrypted before upload. Standard Notes supports up to 100GB of encrypted file storage for paid subscribers.
Protect your notes with industry-leading security. Available for free on all platforms.
Download Standard Notes