# Encrypted notes app: what end-to-end encrypted notes protect on iPhone and Android URL: https://webvpn.org/anonymity/encrypted-notes-app/ Updated: 2026-09-10 How to choose an end-to-end encrypted notes app for iPhone and Android: what end-to-end means for notes, how it differs from locked notes, and free secure options. An end-to-end encrypted notes app encrypts each note on your device with a key that only you hold, before anything is synced, so the provider's servers store text they cannot read. That is different from a notes app with a PIN or fingerprint lock, which controls who can open the app on your phone while the provider may still read every note on its servers. For notes that hold anything private, the encryption is what matters, and it is available free on both iPhone and Android. Notes apps are where people keep the things they do not want to lose: recovery codes, medical details, financial notes, drafts, journals. Most sync those to a server, and most servers can read them. This guide explains what end-to-end encryption means for notes, how it differs from locked notes and from ordinary encryption at rest, the criteria for choosing an app, how the built-in options on iPhone and Android measure up, and the habits that keep encrypted notes actually private. ## End-to-end encryption in a notes app When you save a note in an ordinary syncing app, the note travels to the provider's server over an encrypted connection and is stored encrypted on disk. Both protections are real and neither stops the provider from reading the note, because the provider holds the keys to both. That is encryption in transit and at rest, and it protects against outsiders, not against the provider, its employees, a breach of its systems, or a legal demand. End-to-end encryption moves the key to you. The app encrypts the note on your phone with a key derived from your password or stored in your device's secure hardware; the server receives and stores ciphertext; your other devices, holding the same key, decrypt it. The provider can lose the data, delete it or be forced to hand it over, and in each case what exists is unreadable. The end-to-end encryption guide in the encryption section of this site explains the mechanism in depth. ## Locked notes are not the same thing Many notes apps offer a lock: a PIN, password or biometric check to open the app or a particular note. Locks protect against someone who picks up your unlocked phone. They do not, on their own, say anything about encryption. A locked app can sync notes in a form the provider reads freely. Some apps do encrypt individual locked notes with the lock password, which is real protection for those notes. Apple Notes does this for notes you lock. But read the app's documentation for the word "end-to-end" or "zero knowledge" applied to the notes themselves; a lock screen and a marketing phrase about "bank-level encryption" do not answer the question of who holds the key. ## Criteria for choosing an encrypted notes app Names change and apps come and go; the criteria last. - End-to-end encryption by default, stated plainly, with a description of how keys are derived and where they are stored. - Open-source client code, so the encryption claim can be checked by people who read code, and ideally an independent security audit published by the developer. - A clear recovery story: what happens if you forget your password, and whether a recovery key exists. Providers that can reset your password can read your notes. - Export in a standard format, so your notes are not held hostage by the app. - Cross-platform availability for the devices you actually use, since a notes app you use on one device only is a notes app you will abandon. - Attachments and rich content encrypted too, not just note text; some apps encrypt text and store images in the clear. - A sustainable business model, such as a paid tier, because a free app with no revenue and access to your notes is a warning sign. - Minimal permissions and telemetry, especially on Android. Several apps meet all eight on both iPhone and Android, with free tiers sufficient for most people and paid tiers for extras. ## Built-in notes on iPhone and Android Apple Notes is a reasonable choice for iPhone users under two conditions. With Advanced Data Protection enabled for your iCloud account, Notes and most other iCloud data become end-to-end encrypted, with Apple no longer holding the keys; without it, Apple can read iCloud Notes. Separately, individual notes can be locked with a password or biometrics, and locked notes are encrypted regardless of the account setting. Notes synced to third-party email accounts are not encrypted by Apple. Google Keep encrypts data in transit and at rest but Google holds the keys, so Keep is not end-to-end encrypted and Google can read your notes. Samsung Notes and other manufacturer apps vary; most are not end-to-end encrypted for synced notes. Android users who want end-to-end encryption generally need a third-party app, and the best free secure notes apps for Android are the open-source ones that meet the criteria above. ## Free options and what free means Free encrypted notes exist in two forms. Open-source apps developed by small teams or communities are often fully free, funded by donations or by optional paid features, and are the strongest candidates because their code is inspectable. Free tiers of commercial encrypted notes apps offer the core encrypted notes with limits on attachments, devices or advanced features, funded by the paid tier. Both are legitimate. A free notes app with no visible funding, closed code and access to your notes is the one to avoid; the notes are the product. ## Keeping encrypted notes private in practice The encryption protects the notes on the server. These habits protect them everywhere else. - Use a long, unique password for the notes app, since with true end-to-end encryption it is the only thing protecting your notes if a device is lost. - Save the recovery key the app offers somewhere safe and offline; the provider cannot help you if you lose access. - Lock your phone with a strong passcode, because an unlocked phone shows decrypted notes to anyone holding it. - Turn off note previews in notifications and widgets, which display content on the lock screen. - Check whether the app's clipboard, search index and backups expose note content outside the encrypted store; on some platforms, system search can index notes. - Do not paste secrets into other apps' notes or chats as a workaround for a slow app; the whole point is that the notes stay inside the encrypted store. - For the most sensitive items, such as recovery codes for critical accounts, consider a password manager, which is designed for exactly that and is also end-to-end encrypted. ## What developers and security reviewers say The guidance here follows how encrypted notes developers describe their systems and how independent reviewers evaluate them. Developers of end-to-end encrypted notes apps publish descriptions of their key derivation and storage, and the credible ones state explicitly that they cannot recover a forgotten password or read user notes, and publish or commission audits to support the claim. Apple documents which iCloud data categories are end-to-end encrypted by default and which become so under Advanced Data Protection, listing Notes among the latter, and documents locked notes as encrypted; Google's documentation describes Keep as encrypted in transit and at rest without end-to-end encryption. Security reviewers who compare notes apps consistently distinguish end-to-end encryption from app locks and encryption at rest, treat open-source clients and audits as the main evidence for encryption claims, and warn that free apps with no funding model deserve scrutiny. ## Move your private notes today Pick an app that meets the criteria above for your devices, or turn on Advanced Data Protection if you live in Apple Notes. Move the notes that matter into it, set a strong password, save the recovery key, and delete the copies from the app that could read them. Then the server that holds your notes holds nothing it can read, which is the only kind of privacy a synced note can have. ## FAQ Q: What is an end-to-end encrypted notes app? A: An app that encrypts each note on your device with a key only you hold before syncing it, so the provider's servers store and relay ciphertext they cannot read. Your other devices decrypt the notes with the same key. If the provider is breached or compelled, your notes stay unreadable. Q: Are Apple Notes and Google Keep end-to-end encrypted? A: Apple Notes can be end-to-end encrypted when Advanced Data Protection is enabled for iCloud, and individual notes can be locked with a password or Face ID, which encrypts them. Google Keep is encrypted in transit and at rest but Google holds the keys, so it is not end-to-end encrypted. Q: What is the best free secure notes app for Android? A: Judge by end-to-end encryption, open-source code, an independent audit, and the ability to export your notes. Several well-regarded open-source notes apps meet those criteria on Android with free tiers or fully free versions. The criteria matter more than any specific name, since apps change. Q: Is a notes app with a PIN or fingerprint lock encrypted? A: Not necessarily. A lock controls who can open the app on your phone. It says nothing about whether notes are encrypted on the device or on the server. Many locked notes apps sync notes in a form the provider can read. Q: What happens if I forget the password to an encrypted notes app? A: With genuine end-to-end encryption, the provider cannot reset it because it never had your key, and the notes are lost unless you saved a recovery key. This is the price of the server being unable to read them; store the recovery key somewhere safe.