passphrase.io

passphrase.io

Private Online Notepad

Enter any passphrase to get started. No account required.

• Private - all of your data is encrypted

• Safe - no cookies, tracking, or ads

• Simple - all you need is your passphrase

• Free - and open source

• Fun - enter common words/phrases to see notes left behind by others!

For high security, use a long, complex passphrase that is difficult to guess. Short passphrases lead to high visibility, and text can be overwritten by anyone who stumbles upon it. Please keep in mind that your passphrase is case sensitive.

Your notepad is encrypted in your browser before it is sent to our server for storage. We have no way of knowing your passphrase or seeing the contents of your notepad. If you forget your passphrase, there is no recovery process.

Note: Passphrase.io intentionally requires a lot of RAM for generating secret keys in order to prevent brute force attacks on notepads. Therefore, this app may not work on old or low-end devices.

Technical Details:

Using client-side JavaScript, your passphrase is run through the memory-intensive scrypt key derivation function (N=218, r=8, p=1, dkLen=32) to generate a secret key.

Your secret key is used to encrypt your notepad with AES256 encryption. The ciphertext (encrypted notepad) is sent along with a SHA256 hash of your secret key to the server for storage.

When you retrieve your notepad, your SHA256 hash is sent to the server, and the ciphertext is returned. The ciphertext is decrypted using your secret key, revealing your notepad.

Passphrase.io was inspired by the concept of the Bitcoin briainwallet, which allows you to store money in your brain by memorizing a passphrase.