Encryption that stays
out of your way.
NoCrypt is a small, independent project building zero-knowledge tools — software that's encrypted on your device before it ever reaches a server, so there's nothing for anyone to hand over because no one else ever has the key.
One tool live. More being built.
Every NoCrypt tool shares the same idea — your device holds the key, our servers only ever hold ciphertext. Notes is real and free today; the rest are concepts in progress.
NoCrypt Notes
Write a note, get a link. It's encrypted in your browser before it's sent anywhere — we only ever store ciphertext, and the key lives in the link, not on our servers.
- Client-side AES-256-GCM encryption
- No account, no email, nothing to sign up for
- Burn-after-reading or a time-based expiry
NoCrypt Vault
The plan: encrypted file storage and sharing, sealed on your device before a single byte reaches our infrastructure. Same idea as Notes, for files instead of text.
- Client-side encryption, same as Notes
- Shareable links with expiry & passphrase
- No timeline yet — built when it's built
NoCrypt Mail
The plan: an inbox where subject lines and bodies are encrypted, and only routing metadata is visible to relays. Further out than Vault — mail is a much bigger undertaking.
- PGP-compatible for external recipients
- No infrastructure built for this yet
- Listed here as direction, not a promise
We built NoCrypt so that a subpoena gets you nothing.
Keys are generated and stay on your device. Our servers only ever see ciphertext, so there's no plaintext copy anywhere for us to lose, sell, or surrender — this is exactly how the live Notes tool works today, not a future promise.
$ create note
encrypting in your browser (AES-256-GCM) ... ok
uploading ciphertext only .................. ok
share link generated, key never sent ....... ok
$ open note
fetching ciphertext ......................... ok
decrypting locally with the link's key ...... ok
server never saw the plaintext .......... confirmed
$ _No install, no account — just a link.
Write your note
Type or paste anything into the box. Nothing is sent anywhere yet — it's still just sitting in your browser.
It's encrypted on the spot
Your browser generates a random key, encrypts the note, and only then uploads the scrambled result. The key never leaves your device.
Share the link
The link contains the key. Anyone you send it to can open and decrypt the note — anyone without it, including us, just sees ciphertext.
Free, because it should be.
NoCrypt Notes costs nothing to use — no account, no trial period, no upsell waiting at the end of it. It's a small independent tool, not a funded company with a pricing team, and it stays free because that's simpler and more honest than pretending otherwise.
Use it nowIf Vault or Mail ever get built, pricing for those gets figured out when they're real — not before.
Built because most "encrypted" tools aren't, quite.
A lot of products say "encrypted" and mean "encrypted on our servers, with a key we also hold" — which protects you from a stolen hard drive, not from the company itself. NoCrypt Notes is small on purpose: one real tool, built so the key never exists anywhere but your device and the link you share, with nothing invented to make that sound more impressive than it is.
Built and run by one person.
No founding team, no office, no funding round — NoCrypt is an independent, one-person project. That's a feature, not something to hide: it's why the scope stays small and honest instead of promising a roadmap a whole company would need to deliver.
Questions people actually ask.
Is this really free, forever?
Yes. There's no account to create, so there's nothing to upsell later. If that ever changes, it'll say so clearly here — not through a surprise paywall.
What happens if I lose the link?
The note is gone. There's no password reset or recovery option, because there's no account behind it to reset — the decryption key only ever exists inside that one link. That's the trade-off that makes it zero-knowledge instead of just "encrypted at rest."
Could NoCrypt comply with a government data request?
We could only ever hand over ciphertext — the scrambled, undecryptable version of a note. We never have the key, so there's no plaintext to provide even if legally compelled to try.
Is the code open source?
Not published yet, but the whole design fits in one paragraph: your browser generates a random key, encrypts your note before it leaves the device, and the server only ever stores the resulting ciphertext under a random ID — the key lives only in the link you're given.
Is this an audited, enterprise-grade security product?
No — and be skeptical of any small, free tool that claims otherwise. This is a straightforward implementation using well-established building blocks (AES-256-GCM via the browser's own Web Crypto API), not a custom protocol, and not independently audited. Good for personal notes; not a substitute for audited, professionally supported software.
Ready to stop trusting us with your data?
That's the point — with Notes, you won't have to. Questions, bug reports, or ideas are welcome by email.