Local-first free tier
Notes live in IndexedDB on your device. Unsigned / free users do not start background sync API traffic.
Security
Private by architecture
Best Note is local-first. Encryption happens in your browser. Pro sync is designed so we never see plaintext notes.
Client-side encryption
Pro encrypts note JSON in the browser with AES-256-GCM before upload. Plaintext bodies never leave the device.
Strong key derivation
Password and recovery-word keys use Argon2id (64 MiB memory, 3 iterations) before wrapping the data encryption key.
Recovery words
A 24-word recovery phrase can unlock encryption if you forget your password. Shown once — store it offline. We cannot reset it.
Ciphertext-only server
api.bestnote.app stores ciphertext, IVs, encrypted key wraps, timestamps, and tombstones — not readable note text.
Transport security
All API traffic uses HTTPS/TLS. Realtime notifications carry no note contents — only a signal to pull encrypted changes.
What we never see
- Plaintext note titles/bodies after Pro encryption
- Your encryption password
- Your recovery words
- Unencrypted DEK (data encryption key)
Your responsibilities
- Use a strong unique account password
- Store recovery words offline — loss can mean permanent loss of encrypted cloud notes
- Keep your browser and OS updated
- Export backups of critical notes when needed
Questions? support@bestnote.app· Privacy Policy