Are my notes encrypted in Ushkur?
Short answer
Yes, on the server: titles, subtitles and note text are encrypted with AES-256-GCM before they are stored. It is not end-to-end encryption, because the server holds the encryption key and decrypts your notes to show and search them.
What exactly is encrypted?
Ushkur is an encrypted online notepad in this sense: the server encrypts the title, subtitle and text of each note with AES-256-GCM before writing it to the database. Every note gets a fresh random value, and the ciphertext is tied to the account and note it belongs to, so it cannot be swapped between users.
Connections use HTTPS, and the database provider also encrypts its disks. Your key is not stored at all, only a hash of it.
What is not encrypted?
Some data is kept as plain values because the app needs it to work:
- Category names.
- Creation, update and trash times, and which category a note belongs to.
- Counters for the number of notes, categories and space used.
Why is it not end-to-end encrypted?
End-to-end encryption would mean notes are encrypted on your device and the server never sees the text. Ushkur does not work that way. The encryption key is a secret held by the server, and the server decrypts notes when you open or search them.
That choice keeps search and key changes simple, but it has a cost: the operator's infrastructure can technically decrypt your notes. The privacy policy states that note contents are not read or used for other purposes, but this is a promise, not something the design prevents.
What does this protect against?
It protects the stored data. If the database leaked or a backup was exposed, the note text would be unreadable without the encryption key, which is kept in the server's secrets and not in the database. It does not protect against someone who has your key, or against a compromise of the server itself.
Because of this, avoid storing the most sensitive things in Ushkur, such as passwords or ID numbers. Keep a separate copy of notes that matter.
Free to try, no sign-up
Get a key and start writing notes in a few seconds.
Frequently asked questions
Is Ushkur end-to-end encrypted?
No. Notes are encrypted on the server, which means the server can decrypt them. Ushkur does not use end-to-end encryption.
Can the operator read my notes?
Technically, the operator's infrastructure can decrypt them, because it holds the encryption key. The privacy policy says the contents are not read or used for any other purpose.
Is my key used to encrypt the notes?
No. The key only proves who you are and is stored as a hash. The notes are encrypted with a separate key kept in the server's secrets.
Is the search private?
Search runs on the server: it decrypts your own notes in memory and scans them for your words. It only looks at your own notes.
Related guides
Can I keep private notes without an email address?
Yes, Ushkur lets you keep private notes without an email, and no name, email or phone number is stored with your account. Anonymous note taking here means an anonymous account, not an anonymous connection.
How does the Ushkur key work, and what if I lose it?
The key is your account: you enter it to sign in, and the server stores only a hash of it. A lost key cannot be recovered, because there is no email or phone to reset it with.