Encrypted Shared Notepad
🔒 End-to-end encrypted — we store only ciphertext we can't read, and it auto-deletes after 1 hour.
How to use
- Type or paste — the text encrypts in your browser and saves automatically.
- Share: copy the link or show the QR code and send it to your team.
- They open the link and your changes sync almost live.
A teammate saved a newer version.
The encryption key lives only in the link above (after the #) and never reaches the server. The pad auto-deletes 1 hour after the last edit. Anyone with the link can read and edit.
How the shared notepad works
Open the tool and it mints a fresh pad with a random id and a random AES-256 key, both packed
into the URL after the #. Type or paste anything — it encrypts in your browser and
auto-saves. Press Copy share link and send it to your teammates; when they open it, the
pad decrypts on their device and quietly refreshes every few seconds, so you see each other's
changes almost live.
Why we can't read your notes
The encryption key lives only in the link's # fragment, and by the design of the web
a fragment is never sent to any server. Our server receives and stores nothing but the encrypted
blob — an opaque string it cannot decrypt. So even we, or anyone who somehow reached the storage,
would see only ciphertext. The server also never runs, parses or interprets a pad's contents, and
the page shows retrieved text inside a plain text box, never as HTML, so nothing you paste can
execute.
Built for short sessions
A pad auto-deletes one hour after its last edit — long enough for a working session, short enough that nothing lingers. Anyone with the full link can read and edit (there are no accounts), so treat it like a password and share it only over a channel you trust. Each pad holds up to about 1 MB.
Frequently asked questions
How is this private if it uses a server?
The encryption key is generated in your browser and kept in the link's # part, which browsers never send to a server. We only ever receive and store the encrypted blob, so we — and anyone who breached the server — would see nothing but unreadable ciphertext.
Who can open a pad?
Anyone with the full share link (it carries both the pad id and the key) can read and edit it — there are no accounts. Treat the link like a password: share it only with your team, over a channel you trust.
How long do notes last?
A pad is automatically deleted one hour after its last edit. While your team keeps editing it stays alive; once everyone stops, it disappears within the hour. Each pad holds up to about 1 MB.
Can it run malicious code from a pasted note?
No. The server never executes or interprets pad content, and the page shows retrieved text inside a plain text box only — never as HTML — so a pasted script cannot run.