Security
Protection for the hard moments
Most apps assume the worst that can happen is a lost phone. Arcalox assumes the person holding your device may be forcing you to open it. Encryption is the floor, not the ceiling.
When someone is looking over your shoulder
Coercion defenses no mainstream notes app has
These defenses live in the installed Android and desktop apps, for the moments when simply being encrypted is not enough.
Duress passphrase
A second passphrase opens a normal-looking decoy and can silently destroy the key to your real data.
Realistic decoy
The decoy is seeded with mundane, believable content, so the app never looks like it is hiding something.
Panic wipe
Remove your real vault fast when you have to, leaving nothing to recover.
Quick exit and lock
Leave and lock instantly. The app locks on background, on inactivity, and behind a privacy shield in the task switcher.
Encryption
Always on, and never a toggle
Everything is encrypted at rest on your device from the first launch. There is no setting to forget and no plaintext fallback.
AES-256-GCM at rest
A SQLCipher whole-database key protects every note, secret, and media file. Nothing is written to disk in the clear.
Argon2id key derivation
Your passphrase is stretched with a memory-hard function tuned to resist brute force, then used to unlock the vault key.
No servers, no keys held
The Veydrin Order runs no servers and holds no keys. No one, including us, can read your data. When you sync, only ciphertext leaves the device.
No account, no identifiers
No email, no phone, no login. Your identity is a keypair generated on your device, restorable anywhere with your passphrase.
Who it is for
Built for people whose records could be used against them
Arcalox is a private notebook for anyone, and it is designed first for the people who cannot afford a leak.
Journalists and sources
Keep contacts, drafts, and evidence in a vault with no account trail and a decoy for a border stop or a seized device.
Activists and organizers
Plans, rosters, and notes stay offline and encrypted, with coercion defenses for a detention or a search.
Survivors
A private record of what happened, held on your own device, with a decoy vault for a shared or monitored phone.
Everyone who wants privacy
Passwords, journals, and everyday notes, encrypted by default, with no company reading over your shoulder.
Sync
Move between your devices without trusting a stranger
Today, Arcalox syncs by exporting a single encrypted file that you keep and move between your own devices, through a folder or cloud you already control. That same encrypted file opens in the installed apps or in the browser, carrying your notes, folders, tags, and images between them. Only ciphertext ever leaves the device, so no provider and no company, including ours, can read it. Direct device-to-device peer-to-peer sync over the Veydrin Community Network is on the roadmap, not a claim we make yet.
The full security notes, including the threat model, are public in the source repository.