Encrypted · offline · no account

Record all of life. Keep it yours.

Arcalox is a free, open place for your notes, secrets, and moments. Encrypted on your device the second you save, with no account, no servers, and no way for anyone else, including us, to read a word of it.

No install, no sign-up. Encrypted in your browser. Read the source.

The Arcalox web app: an end-to-end encrypted vault, unlocked with a passphrase that never leaves your browser.

Encrypted and offline by design

0
accounts
0
telemetry
AES‑256
always on
$0
forever

One private vault for everything that matters

Notes, passwords and secrets, photos, video and voice, drawings, documents. All of it in one place, all of it encrypted, all of it on a device you hold.

Notes and secrets

A live markdown editor with links, tags, search, and math. Passwords and 2FA codes live in the same always-encrypted vault.See all features →

Capture and draw

Voice, photo, and video notes, plus a drawing canvas. Photos are stripped of location and metadata before they are encrypted.See all features →

Coercion defenses

A duress passphrase opens a realistic decoy vault and can wipe the key to your real data. Nothing like it in a mainstream notes app.How protection works →

Encrypted, always

AES-256-GCM at rest, derived through Argon2id. No account, no telemetry, no outbound network calls. Encryption is never a toggle.Read the security model →

Try Arcalox in your browser

The web app is the encrypted tier: your notes are end-to-end encrypted in the browser and stay on your device. Open it, set a passphrase, and start writing. When you want the coercion defenses, install the app.

Built for people whose records could be used against them

Arcalox is a private notebook for anyone, and it is designed first for the people who cannot afford a leak: journalists and their sources, activists and organizers, survivors, and everyone who simply wants their notes to stay their own.

Open source

Every line is public on Codeberg under AGPL-3.0. Read it, build it yourself, or fork it.

No telemetry, ever

No analytics, no crash reporting to us, no tracking library. The app makes no outbound network calls.

Yours to keep

No account to lock, no company that can take it back. A tool given permanently, not a service.

Features Security Compare FAQ