Encrypt a note
AES-GCM with a passphrase. Share the link, the key never touches a server.
Nothing you enter is sent anywhere
AES-256-GCM with the key stretched from your passphrase by 600,000 rounds of PBKDF2, which is OWASP’s current figure. The salt and nonce are random each time and packed into the output, so the same message encrypts differently on every run. Everything happens in this tab. There is no recovery if you lose the passphrase.