10.1 What's protected out of the box
Right after install, with no configuration:
- Notes on the device are encrypted. Not "hidden in an app folder" — actually encrypted. The key lives in the phone's secure storage, the same place Android keeps keys for banking apps, and in a dedicated secure chip whenever possible.
- Your text goes nowhere. The one exception is sync to your Google Drive, and only if you've turned that on.
- No ads and no third-party analytics. There are no advertising or tracking SDKs in the app.
- Connections are secured. When the app does reach the network, it verifies the other end and refuses anything unencrypted.
10.2 Extra security
Settings → Security. An extra layer for people who want maximum protection.
PIN
A four-digit code required to enter the app. You set it in settings and type it twice to confirm.
If you get it wrong: after three failed attempts, entry is locked for 5 minutes. The app shows how many attempts remain and how long to wait. It's a guard against brute-forcing.
Biometric unlock
Fingerprint or face unlock — faster than typing a code.
A PIN is still required as a fallback: biometrics sometimes fail (wet hands, a mask, a sensor glitch), and without a backup you'd be locked out of your own app.
Auto-lock
How long the app can be in the background before asking for the code again: off, 30 seconds, 1 minute (default), 3, 5 or 30 minutes.
1 to 3 minutes is a reasonable middle ground: no one will read over your shoulder, and you won't have to re-enter the code every time you reply to a message.
Screenshot blocking
Blocks screenshots inside the app, and hides the content with a blank preview in the recent-apps switcher. Turns on together with "Extra security".
Stricter backup-password rules
With "Extra security" on, a backup can't be created with a weak password. The requirements are listed in section 9.3.
10.3 System status
Settings → System status. This is where the app tells you honestly whether everything is in order. Tap "Check" — it takes a couple of seconds.
The overall verdict is one of three: All good, Needs attention, or Critical. Here's what actually gets checked.
Encryption
Whether encryption of the notes database is running. Normally: "Active".
About key rotation. Every six months the app rotates its encryption key — routine maintenance, like changing a lock. A month before it happens, you'll see a prompt to make a backup. It's not a sign of trouble: any operation on your data is simply safer with a backup in hand. Make the backup and forget about it.
Data integrity
Checks that the notes database isn't corrupted. If it finds problems, the app tells you what to do — usually making a backup and restarting is enough.
Key protection
Shows how the encryption key is stored:
- Hardware-backed — the key sits in a dedicated secure chip. The best option, and the norm on most modern phones.
- Software-backed — no chip; the key is protected by the OS. Still fine, just a little weaker.
If the key was cleared by the system — which usually happens after you change the phone's own PIN or fingerprint — the app tells you, and you'll need to set up its security again.
Threat check
The app checks whether it's running in a hostile environment:
- Root access. On a rooted phone, any app with root can bypass protection. For sensitive notes, an ordinary device is safer.
- Instrumentation tools (Frida / Xposed). Software that can interfere with how apps behave.
- Emulator. The app isn't running on a real phone.
- App signature. Checks that the app hasn't been altered after signing. "Signature mismatch" means the installed build isn't the original one — reinstall from the official store.
If anything is detected, the app shows a warning with an explanation. In most cases you can carry on at your own risk.
Network protection and backup
Shows whether connection verification is on, whether unencrypted traffic is blocked, and when you last made a backup.
10.4 If something has gone wrong
Forgot the PIN. The PIN protects entry to the app. It can't be recovered — you'll have to reinstall the app and restore from a backup. Another reason to keep backups.
Forgot the encrypted-sync master password Pro. The encrypted data in the cloud can't be recovered — not by us, not by you. But the notes on a device where you're already signed in remain intact. From that device, make a local backup file, then turn off encrypted sync, wipe the cloud data, and set it up again with a new password.
Forgot the password to a backup file. The file can't be opened — that's the whole point of encryption. If the original notes are still in the app, make a fresh backup with a password you'll actually remember.
You changed the phone's PIN or fingerprint and the app asks to set up security again. That's expected: the app's keys are tied to the phone's security settings, and when those change the system deliberately invalidates the old keys. Your notes aren't lost.
↑ Back to contents