Encrypted Plain-Text Note Apps

CryptPad is a self-hosted, zero-knowledge office suite designed for real-time collaborative editing and content management. It provides a privacy-centric infrastructure where documents, files, and notes are encrypted in the browser before transmission, ensuring that the server administrator cannot access the underlying data. The platform implements zero-knowledge user authentication, utilizing cryptographic keys to verify identities so that plain text passwords are never stored on the server. To further isolate sensitive operations, the system employs a security architecture that separates the user interface from cryptographic processes. The suite covers a range of administrative and operational capabilities, including user registration management, instance branding customization, and server parameter configuration. It also includes diagnostic utilities for system configuration and supports containerized deployment for consistent environment installation.

Joplin is an open-source, cross-platform note-taking application designed for secure, private knowledge management. It functions as a local-first productivity platform, maintaining a complete relational database on the user's device to ensure offline availability and high-performance data retrieval. The application prioritizes data sovereignty by implementing an end-to-end encryption layer, which secures all information locally with a master key before any synchronization occurs. The platform distinguishes itself through a delta-based synchronization engine that transmits only specific file changes, optimizing performance across multiple devices and operating systems. Users can extend the core environment through a plugin-based architecture that supports custom themes, scripts, and UI components. For professional or collaborative environments, the software offers self-hosted synchronization options and team management capabilities, allowing organizations to maintain full control over their data infrastructure and security policies. Beyond core note-taking, the application supports rich multimedia content, including embedded files, diagrams, and mathematical expressions. It provides a comprehensive web-clipping tool for archiving online research and a RESTful API that enables programmatic access to notes and metadata for external integrations. The system is built on a cross-platform abstraction layer to ensure consistent behavior across desktop and mobile environments.

Notesnook is a cross-platform note-taking application designed for private knowledge management. It functions as a secure personal information manager that prioritizes user data confidentiality by employing client-side end-to-end encryption for all stored notes, attachments, and metadata. By utilizing a local-first synchronization model, the application ensures that information remains accessible offline while maintaining a consistent state across desktop and mobile devices. The platform distinguishes itself through a focus on privacy-centric organization and secure information handling. Users can structure complex knowledge bases using nested notebooks, tags, and bidirectional linking, all while keeping their data protected from unauthorized access via local application locks and multi-factor authentication. For external collaboration, the system provides password-protected sharing, ensuring that sensitive content remains encrypted and restricted to authorized recipients. Beyond core note-taking, the environment includes a component-based rich editor that supports tables, formulas, and media, alongside tools for capturing and archiving web content. The application also integrates task management features, allowing users to schedule reminders and track objectives directly within their notes. To support data sovereignty, the platform offers comprehensive import and export capabilities, enabling users to migrate data from other services or create local backups to prevent vendor lock-in. The software is available as native packages for major desktop and mobile operating systems, providing a consistent interface that can be customized to suit individual workflows.

anytype-ts is a TypeScript client library and offline-first knowledge base client designed for managing structured layouts and modular blocks within a private distributed database. It functions as a zero-knowledge data synchronizer and schema-driven API wrapper that enables the secure replication of encrypted data across devices. The library utilizes peer-to-peer connectivity and zero-knowledge encryption to ensure data remains private and unreadable to hosting infrastructure. It employs a schema-driven approach to compile data definitions into typed language bindings, ensuring consistent communication via a remote procedure call interface. The system supports personal knowledge management through a custom data model that organizes tasks, wikis, and diverse information. Its capability surface includes web content capture, localization synchronization, and the creation of composable content such as boards and calendars.

Signal-Desktop is a cross-platform messaging application that provides end-to-end encrypted communication. It implements the Signal Protocol to secure messages and voice calls, ensuring that only intended recipients can access content. The application manages asynchronous key exchange and session initialization to maintain secure communication channels between parties who are not online simultaneously. The project distinguishes itself through advanced cryptographic protections, including hybrid post-quantum security that combines classical elliptic curve cryptography with lattice-based algorithms to defend against future decryption threats. It further protects user privacy by obfuscating message headers with rotating keys, which prevents traffic analysis and the correlation of conversation participants. To ensure reliability over constrained networks, the application utilizes erasure-coded data transmission to reconstruct messages despite potential packet loss. The software provides comprehensive data management and synchronization capabilities, allowing users to link desktop clients to mobile accounts for consistent conversation history. It secures local data through encrypted message archives and provides automated lifecycle management to handle message retention. The application also includes robust identity verification mechanisms, enabling users to authenticate correspondents via public key fingerprint comparison to prevent impersonation.

Croc is a command-line utility for sending files and folders between computers using end-to-end encrypted peer-to-peer connections. It employs elliptic curve encryption and key agreement to secure data transmission between remote endpoints. The tool allows users to coordinate transfers using a shared code phrase and supports the operation of custom relay servers to facilitate connections without relying on public infrastructure. It also includes a proxy client to route encrypted traffic through SOCKS5 proxies. Additional capabilities include resumable data transmission for unstable connections, content filtering to exclude specific files or folders, and stream-based data piping for integration with shell pipelines via standard input and output.

Logseq is a privacy-focused, local-first knowledge base designed for personal information management and networked thought mapping. It functions as a bi-directional graph editor that organizes content into hierarchical, outliner-based structures, allowing users to connect related concepts through automated backlinking and visual relationship mapping. The platform distinguishes itself by maintaining all user data in plain text markdown files stored directly on the local device, ensuring offline availability and long-term portability. It employs a logic-based query engine to perform complex relational searches across the graph of notes and metadata, while a content-addressable storage model ensures data integrity for every information block. The application supports a broad range of information management tasks, including academic research synthesis and structured project documentation. Users can extend the core functionality through a sandboxed plugin system that allows for custom interface components and data manipulation. The software is documented through a dedicated resource library to assist with setup and configuration.

TagSpaces is an offline-first file tagging and organization platform that lets you manage local files with portable metadata stored directly in filenames or sidecar JSON files, eliminating the need for a central database. It functions as a full-text file search engine, a Kanban board file organizer, a local AI file assistant, an S3-compatible cloud file manager, and a web clipper and bookmark manager, all within a single application. The project distinguishes itself through a local-first architecture where all file operations, indexing, and AI processing run entirely on the device, with cloud storage treated as an optional remote mount point. It integrates with a locally running Ollama engine for on-device AI tasks such as automatic tagging, summarization, and image analysis, keeping all data private. A plugin-based file viewer system renders over 50 file formats, while metadata is stored in sidecar files or embedded in filenames, ensuring portability across devices and sync services. Beyond its core identity, TagSpaces offers a command-line interface for programmatic file operations and search indexing, supports S3-compatible object storage and WebDAV servers for remote file management, and provides a browser extension for capturing web pages, screenshots, and bookmarks as local files with automatic tagging. The application includes built-in viewers and editors for documents, images, audio, video, 3D models, and Markdown files, along with geo-tagging on interactive maps, Kanban board task management, and full-text search with fuzzy matching and saved queries. The application can be installed on Windows, macOS, and Linux, run in portable mode, or self-hosted as a static web app on personal servers or cloud platforms like Cloudflare Pages and AWS Amplify.

Siyuan is a self-hosted knowledge management platform designed for private note-taking and information organization. It functions as a local-first application that stores all user content as plain text files on the local file system, ensuring data ownership and offline availability. The platform utilizes a block-based document model, which structures information as a tree of independent content blocks to facilitate granular manipulation and bidirectional linking. Users can extend the core functionality through a sandboxed plugin architecture, allowing for the development of custom themes and scripts that modify the editor behavior and user interface to suit specific workflows. The software is built as a containerized application, supporting deployment within isolated environments to standardize dependencies and simplify maintenance across various hosting infrastructures. It maintains consistency across multiple devices through a persistent socket connection that propagates state changes in real time, while the interface utilizes virtual document object model reconciliation to manage updates efficiently.

Trilium is a local-first personal knowledge management system designed to store and organize information on a user's own device. It functions as a hierarchical knowledge base where every note acts as both a standalone document and a container for nested children, allowing for complex information relationships and deep categorization. The platform distinguishes itself through a component-based interface that dynamically renders diverse content types, including rich text, diagrams, and executable scripts. All data is persisted within a single relational database file, which supports a versioned archive and a soft-delete lifecycle to protect information integrity. This architecture enables users to manage large volumes of interconnected data within a unified, extensible workspace. The system provides a comprehensive environment for digital asset organization, combining document management with scriptable automation. It utilizes a combination of server-side rendering and client-side orchestration to maintain a responsive interface for navigating and searching through structured information.