Encrypted Secure Notes
Encrypt secret notes, passwords, and sensitive text locally with zero-knowledge AES-256-GCM encryption and PBKDF2 key derivation before sharing or archiving.
Interactive Workbench
Real-time processing directly in your browser.
Compose Secret Note
Armored Encrypted Output
Zero-Knowledge Client-Side Encrypted Note Vault
The Encrypted Secure Notes utility provides zero-knowledge, browser-native text encryption powered by the standard Web Crypto API. Engineered for individuals and security teams requiring end-to-end confidential message storage, this workspace encrypts private memos, passwords, recovery phrases, and cryptographic keys using cryptographic standard AES-GCM 256-bit authenticated encryption.
Security is rooted in robust cryptographic key derivation. The engine processes your chosen passphrase through PBKDF2-HMAC-SHA256 with 100,000 hashing iterations and a cryptographically random 16-byte salt generated via window.crypto.getRandomValues. The resulting ciphertext is bundled with its 12-byte initialization vector (IV) and authentication tag into a portable, armored payload.
Because all encryption and decryption operations execute entirely within client memory, neither your passphrase nor your plaintext notes ever touch remote cloud servers, database logs, or intermediary networks. Armored note payloads can be safely stored on untrusted cloud drives, emailed across public channels, or archived in text documents.
Core Tool Capabilities
- AES-GCM 256-bit Authenticated Encryption: Encrypts notes with Galois/Counter Mode authenticated encryption to guarantee both confidentiality and integrity.
- PBKDF2 Key Derivation with 100,000 Iterations: Hardens passphrases against brute-force and dictionary attacks using intensive key derivation and unique salts.
- Self-Contained ASCII Armored Bundles: Packages ciphertext, salt, IV, and cryptographic parameters into standard copyable and downloadable armored text blocks.
- Tamper-Proof Decryption & Tag Verification: Detects any unauthorized modification or payload corruption before attempting plaintext reconstruction.
Local Browser Privacy
Your files are processed locally on your device. Files are not uploaded, transmitted, or stored on remote servers.
Once the page has loaded, you can disconnect your network connection and continue using this tool offline.
Target Use Cases
- • Transmitting Sensitive Passwords and Credentials
- • Cold Storage of Cryptocurrency Recovery Seeds
- • Confidential Journaling and Personal Notes
- • Secure Text Sharing in Untrusted Environments
Technical Specifications & Platform Limits
NIST-standard authenticated symmetric encryption.
Compute-intensive key stretching against GPU cracking.
Cryptographically secure pseudo-random number generator.
Zero-knowledge local execution with no server telemetry.
Step-by-Step Workflow
Compose Note and Enter Strong Passphrase
Type your confidential note content and define a robust encryption passphrase with confirmation.
Execute In-Browser AES-256-GCM Encryption
Click Encrypt Note to derive cryptographic keys and produce the authenticated ciphertext bundle.
Copy or Save Armored Payload
Copy the armored string or download the encrypted text file for secure transmission or cold storage.
Decrypt Existing Note Payload
Switch to Decrypt Note mode, paste the armored payload, enter the passphrase, and view your decrypted text.
Practical Real-World Use Cases
Transmitting Sensitive Passwords and Credentials
IT administrators sending temporary account passwords, SSH keys, or database credentials over email or Slack.
Cold Storage of Cryptocurrency Recovery Seeds
Crypto holders encrypting 12/24-word BIP-39 mnemonic seed phrases before backing them up to cloud storage.
Confidential Journaling and Personal Notes
Individuals maintaining encrypted journal entries and financial records protected against device theft.
Secure Text Sharing in Untrusted Environments
Journalists and researchers exchanging confidential source notes across unencrypted communication channels.
Frequently Asked Questions
- Can SHRTX recover my note if I forget my password?
- No. The tool operates with strict zero-knowledge architecture. No encryption keys, passwords, or recovery mechanisms are stored on any server. If you lose your passphrase, the encrypted data cannot be decrypted.
- What is AES-GCM and why is it used?
- AES-GCM (Galois/Counter Mode) is an authenticated symmetric cipher that provides both confidentiality (keeping data secret) and integrity (ensuring data has not been modified or tampered with).
- How does the tool defend against brute-force attacks?
- The engine uses PBKDF2 with 100,000 SHA-256 iterations and a random 16-byte salt for every note. This makes automated dictionary and GPU brute-force attacks computationally expensive and impractical.
- Can I save the encrypted note as a file?
- Yes. You can click 'Save' to download a standard .txt file containing the armored encrypted payload, which can be stored anywhere safely.
- Is internet connectivity required to encrypt or decrypt notes?
- No. All cryptographic operations are performed locally in your browser using the native Web Crypto API. The tool functions completely offline without sending any network requests.
Share this tool
Help others discover this utility. No login or registration required.
Master this tool with Guides & Articles
Learn the workflows, common mistakes, and advanced techniques behind Encrypted Secure Notes - Browser-Encrypted Ephemeral Text Vault with our deep-dive educational content.