Features
One vault for everything that matters
Notes, passwords and secrets, photos, video and voice, drawings, documents. All of it in one place, all of it encrypted, all of it on a device you hold. No cloud account stands between you and your own records.
Notes that link
A live markdown editor with wikilinks, backlinks, tags, folders, saved views, math, and full-text search. A security-aware reader that never loads a remote image, so nothing you open can phone home.
Secrets, held close
Passwords, 2FA codes, and hidden fields live inside your notes, with a built-in password generator. Kept out of search, held in the same always-encrypted vault.
Capture in the moment
Voice, photo, and video notes taken right in the app. Photos are stripped of location and hidden metadata before they are encrypted.
Draw and diagram
A built-in drawing canvas with pen, shapes, and text. Sketches live in the same encrypted vault and render right inside your notes.
Bring your notes
Import from Joplin, Obsidian, Evernote, and Standard Notes. Your library comes with you, encrypted the moment it lands.
Grounding, woven in
Grounding and breathing exercises are reachable from anywhere in the app, for the moments a record alone is not enough.
Encrypted, always
AES-256-GCM at rest with a SQLCipher whole-database key, derived through Argon2id. Encryption is on from the first launch and is never a setting you can forget.
Offline and yours
No outbound network calls. No analytics. No account. Your identity is a keypair created on your device, restorable anywhere with your passphrase.
Where it runs
Available now, and growing
Web
Android
Linux
Windows
macOS
iOS
The web app runs at app.arcalox.com with nothing to install. It is the encrypted tier: your notes are end-to-end encrypted in your browser and persist on your device, without the on-device coercion defenses (duress, decoy, panic wipe) that stay exclusive to the installed apps.
Nothing to install
Try Arcalox in your browser
Open it, set a passphrase, and start writing. Your notes are end-to-end encrypted in the browser and stay on your device.