Your notes are probably the most honest record of your inner life that exists in digital form. A journal entry, a therapy reflection, a financial plan, a list of things you’re afraid of — these are not the polished, public-facing outputs that most digital services were designed to store. They’re the unfiltered thinking that people used to keep in physical notebooks precisely because notebooks don’t phone home.
Modern note-taking apps have introduced features that are genuinely useful: sync across devices, search, tags, links between notes. But most of them — Notion, Google Keep, Apple Notes with iCloud sync, Evernote — require you to hand your notes to a server that can read them. Server-side encryption means the provider holds the keys. Your most private thoughts are accessible to the company you’re using.
End-to-end encrypted note-taking apps change this at the architecture level. Three of the most established options in this space are Standard Notes, Joplin, and Cryptee. They’re not equivalent, and the right choice depends on what you’re prioritizing.
What End-to-End Encryption Actually Means for Notes
Before comparing the apps, it’s worth being precise about what end-to-end encryption (E2EE) means in this context.
With a standard cloud note-taking service, your notes travel over an encrypted connection to the provider’s servers, where they’re stored encrypted at rest — but with keys that the provider holds. The provider can decrypt your notes. They do so to enable features like full-text search, AI summaries, and collaboration. They also can do so if legally compelled.
With end-to-end encryption, your notes are encrypted on your device before they leave it. The server receives ciphertext — an unreadable scramble — and never holds the keys needed to decrypt it. The provider genuinely cannot read your notes. Neither can a government subpoena targeting the provider. The privacy guarantee is mathematical, not a policy commitment.
The trade-off is real: E2EE note-taking apps cannot offer server-side full-text search (they can do client-side search, which works differently), cannot offer collaborative editing in the same way, and cannot recover your notes if you lose your passphrase.
Standard Notes
Standard Notes is the most established E2EE note-taking application, and it has a track record that matters in this space. The app has been around since 2017, published its security audits publicly, and operates on a freemium model with a paid tier that unlocks additional editors and themes.
In 2024, Proton — the company behind Proton Mail and Proton Drive — acquired Standard Notes. This acquisition was broadly well-received in the privacy community: Proton has a consistent track record on E2EE and a business model built around privacy, not advertising. The acquisition raised the question of whether Standard Notes would eventually be integrated into the broader Proton ecosystem, which would give it significantly more infrastructure backing.
What Standard Notes does well:
Standard Notes uses a well-documented encryption architecture: notes are encrypted with AES-256-CBC, using a key derived from your password through a strong key derivation function. The source code is open-source. The company has undergone third-party security audits and published the results.
Sync is reliable and cross-platform — iOS, Android, macOS, Windows, Linux, and a web interface. The app handles plain-text notes by default and extends to rich text, spreadsheets, code, and other formats through an editor extension system.
The free tier includes the core encrypted sync functionality. Paid plans add premium editors and enhanced features. Given that the free tier covers the privacy-critical function — encrypted sync — it’s a usable option without paying.
Limitations:
Collaborative editing is limited. Standard Notes is built around individual notes, not shared workspaces. If you need to share and collaboratively edit notes with others, Standard Notes is not designed for that.
The app is functional rather than beautiful. For users coming from Notion or Craft, the interface feels minimal. The design trade-off is intentional — simplicity has fewer attack surfaces — but it’s worth knowing.
Joplin
Joplin is a free, open-source note-taking application with optional end-to-end encrypted sync. Unlike Standard Notes, Joplin doesn’t provide its own sync infrastructure — instead, you bring your own sync backend. Joplin supports syncing through a self-hosted WebDAV server, Nextcloud, Dropbox, OneDrive, Amazon S3, or the Joplin Cloud service (a paid hosted option).
When you use E2EE in Joplin, notes are encrypted before they’re uploaded to whatever sync service you’re using. Your Dropbox, in this case, would receive encrypted blobs — not readable notes. Dropbox can’t read your notes even though the files are stored on their servers.
What Joplin does well:
Joplin is free and open-source, with no vendor lock-in. Because it exports to standard Markdown and stores attachments as regular files, you own your data in a completely portable format. If Joplin were to shut down tomorrow, your notes remain fully readable.
The app supports Markdown natively and renders it cleanly. For people who write in Markdown — developers, technical writers, anyone familiar with the syntax — Joplin is a natural fit. It handles notebooks, tags, and linking between notes.
Joplin’s approach to sync is flexible enough to enable complete self-hosting: your notes, encrypted, on a server you control. For technical users who want maximum independence, this is the gold standard.
Limitations:
Joplin is not polished by the standards of consumer apps. The setup process — particularly configuring E2EE and a sync backend — requires more comfort with technical configuration than Standard Notes.
Joplin Cloud, the hosted sync option, is functional but smaller and less battle-tested than Standard Notes’ infrastructure. Choosing a third-party sync provider (Dropbox, OneDrive) means trusting a second provider’s reliability, even if not their privacy.
The mobile apps have historically lagged the desktop apps in usability. This has improved, but Joplin’s mobile experience remains less polished than competing options.
Cryptee
Cryptee occupies a slightly different niche. Based in Estonia — a country with strong data protection laws — Cryptee is an E2EE document and photo storage application that includes a note-taking component. It’s designed for people who want private cloud storage for documents and files, with notes as part of that system rather than the core product.
Cryptee’s encryption model is fully client-side: files, photos, and notes are encrypted on your device before upload. The server holds only ciphertext. The company publishes its security architecture in detail and has committed to a “zero-knowledge” model.
What Cryptee does well:
Cryptee handles more than notes. If you want an encrypted home for documents (PDFs, Word files, spreadsheets), photos, and notes in one place, Cryptee’s scope matches that need. This is useful for people who want a single private archive for personal files of multiple types.
Being based in Estonia provides legal protection through EU law. Cryptee falls under GDPR. Government access requests go through EU legal processes rather than the broader and sometimes more permissive access regimes of US law.
The free tier provides 100 MB of storage, with paid plans offering more. Pricing is modest compared to mainstream cloud services.
Limitations:
Cryptee is a smaller, independent company without the infrastructure scale of Proton or the community of Joplin. For a service whose value proposition is long-term private archiving, vendor longevity is a legitimate concern.
The note-taking experience is functional but not as mature as Standard Notes or Joplin. If note-taking is your primary use case — rather than document storage — Cryptee is serviceable but not specialized.
The mobile apps are available but less developed than the web experience.
Comparing the Three Directly
| Standard Notes | Joplin | Cryptee | |
|---|---|---|---|
| E2EE by default | Yes | Optional | Yes |
| Open-source | Yes | Yes | Partial |
| Self-hosting | No | Yes | No |
| Sync | Standard Notes servers | Your choice | Cryptee servers |
| Free tier | Yes (core features) | Yes (all features) | Yes (100 MB) |
| Mobile apps | Mature | Functional | Basic |
| Beyond notes | Editors, spreadsheets | Attachments | Docs, photos |
| Jurisdiction | USA (Proton: Switzerland) | N/A (open-source) | Estonia (EU) |
The Password Recovery Problem
All three apps share a fundamental limitation that users should understand before committing to them: if you forget your passphrase, your notes are gone.
This is inherent to E2EE. The provider cannot recover your notes because they don’t hold your keys. Some apps provide optional recovery codes that you generate during setup and store somewhere safe — but if you lose both the passphrase and the recovery code, nothing can recover your data.
This is the correct architecture for privacy. But it requires treating your passphrase and recovery code with the same care you’d give to a physical safe combination. A password manager is the obvious place to store them; the irony of relying on a cloud service to protect your access to your encrypted cloud service is noted, but it’s the practical solution.
What These Apps Don’t Cover
E2EE note-taking apps solve the problem of private text notes and documents. They’re not designed to handle the full scope of personal memory storage — photos, voice notes, files of arbitrary types, and the relationships between them.
Standard Notes handles plain text, Markdown, and through extensions, some structured formats. Joplin handles Markdown with attachments. Cryptee is the broadest, extending to documents and photos, but it’s not a complete photo library or file manager.
For the broader category of personal memory storage — photos, audio, documents, notes, and the context connecting them — the problem is more complex than any single E2EE notes app addresses.
The Mainstream Alternatives and What They Trade
For comparison: the apps most people actually use for notes.
Apple Notes encrypts individual notes optionally, but the default iCloud sync uses server-side encryption. Apple holds the keys. Apple can access your notes if legally compelled. The Notes interface is excellent; the privacy guarantee is limited.
Google Keep and Google Docs use server-side encryption. Google can read your notes. Google explicitly uses account data for advertising and product improvement. For anything sensitive, this is not an appropriate storage location.
Notion encrypts in transit and at rest using server-side encryption. Notion can access your content. The company’s privacy policy permits using aggregate and anonymized data for product improvement. Notion AI, when enabled, sends note content to AI processing services. For private journaling, Notion’s architecture is not appropriate.
Obsidian occupies an interesting position: notes are plain Markdown files stored locally on your device. By default, there’s no sync, no cloud upload, no server. Your notes go nowhere. The optional Obsidian Sync service encrypts notes in transit and at rest with E2EE. Obsidian is worth mentioning as a local-first option that can be used entirely offline.
Choosing Between Them
Choose Standard Notes if you want a mature, well-audited E2EE notes service with reliable sync and no technical setup required. The Proton acquisition adds long-term confidence. The interface is minimal but functional.
Choose Joplin if you’re technically comfortable and want maximum control — self-hosting, portable Markdown format, no vendor dependency. The open-source model and portable format provide the strongest long-term independence.
Choose Cryptee if you want E2EE coverage for documents and photos in addition to notes, and want a provider operating under EU law with a zero-knowledge commitment.
Consider Obsidian with local storage if you want no cloud dependency at all and are comfortable managing your own backups.
Where Private File Storage Fits
E2EE note-taking apps protect your text-based thinking. But personal memory storage is broader than text notes.
For photos, voice recordings, scanned documents, and the files that make up a life record, the appropriate storage depends on the same questions: who holds the keys, what does the provider do with what they can observe, what happens if the service shuts down, how does deletion actually work?
daftei uses server-side AES-256 encryption — not E2EE, which means daftei can offer AI-assisted features that E2EE makes impossible. For users who want private storage with AI-powered organization without contributing their files to third-party AI training, this is a deliberate trade-off: richer features in exchange for trusting the provider’s data practices rather than the mathematics of E2EE.
For pure note-taking where AI assistance is not a requirement and maximum privacy is the goal, any of the three E2EE apps reviewed here provides stronger technical privacy guarantees than mainstream alternatives. The right choice is the one that matches your technical comfort, your ecosystem, and how seriously you treat your passphrase.