Today
AES-256-GCM encryption
The default seal is AES-256-GCM. The key comes from your passphrase through PBKDF2-SHA256 at 600,000 iterations, with a fresh random salt and IV on every save.
Encrypted notes for Windows
Seal any note with AES-256-GCM.
Qryptic is a notepad that can seal any note with AES-256-GCM, on your own PC, fully offline. Plain notes stay plain .txt and .md files you can open anywhere.
Windows desktop app. Not released yet. No download yet.
Ships today
What Qryptic does right now
Everything in this section is in the app today.
Today
Tamper detection
Every AES-256-GCM seal carries a 128-bit tag. A wrong passphrase, or any change to the sealed text (salt, IV or ciphertext), is rejected with an error instead of opening as scrambled text.
Today
Fails closed
Saving a sealed note with no passphrase stops the save. It never writes the note in plain text.
Today
Fully offline
No account needed to write, seal or open a note. Your notes are files on your PC.
Today
Block editor
Headings, lists, tables, quotes, images and code blocks, rendered as you type.
Today
26 themes
From clean dark and paper to neon glass and futurism. Switch in one click.
Also in the app today
- Safe upgrades
- Tabs and real files
- Read aloud
- Repo folders
- Custom theme builder
- Code blocks with one-click copy
- Sealed secrets notes
Editions
Two editions of Qryptic
The notepad today, and the notepad with stronger locks, planned. Pricing is not set yet.
The notepad
Qryptic
The notepad that can seal any note with AES-256-GCM. Fully offline, and your notes are files you own.
Includes- AES-256-GCM encryptionToday
- Tamper detectionToday
- Fails closedToday
- Fully offlineToday
- Block editorToday
- 26 themesToday
- Read aloudToday
- QOL ID sign-in in the appComing
- Proper Windows installerComing
Pricing not set yet
Join the list
Stronger locks
Qryptic+
Planned: the same notepad with stronger locks on top of AES-256-GCM.
Everything in Qryptic, plus- Custom theme builderDesign your own palette and save it as a theme. In the current app for everyone today. Which edition keeps it is a draft.Today
- Argon2id key stretchingMemory-hard key derivation. It makes guessing a weak passphrase on graphics cards far more expensive.Coming
- Key filePassphrase plus a file, for example on a USB stick. A stolen passphrase alone will not open the note.Coming
- PIN clipboard vaultClipboard history behind a quick PIN, rate-limited and sitting on top of your vault key. A convenience lock, not extra encryption.Coming
Pricing not set yet
Join the list
Planned line-up. Features marked Coming are not in the app yet, and the line-up can change before launch. Nothing is on sale yet.
Security, in plain words
How a note is sealed
These are the facts of the app as it is today. Sealing is a choice you make per note. No marketing numbers.
When you seal a note, today
- Cipher
- AES-256-GCM, the default seal
- Key from your passphrase
- PBKDF2-SHA256, 600,000 iterations
- Salt
- 16 random bytes, new on every save
- IV
- 12 random bytes, new on every save
- Tamper check
- 128-bit tag on every AES-256-GCM seal. A wrong passphrase, or any change to the sealed text, is rejected
- No passphrase
- Saving a sealed note stops. It never writes the note in plain text
A sealed note on disk
QGCM1.salt.IV.ciphertext + tag
Stronger locks, coming
Planned as extra layers on top of AES-256-GCM, never as a replacement.
- Argon2id key stretching Coming
Memory-hard key derivation. It makes guessing a weak passphrase on graphics cards far more expensive.
- Key file Coming
Passphrase plus a file, for example on a USB stick. A stolen passphrase alone will not open the note.
- Multicrypt cascade Coming
AES-256-GCM plus XChaCha20-Poly1305: insurance if one cipher is ever broken. It does not help against passphrase guessing.
- Hardware security key Coming
Unlock with a FIDO2 key or Windows Hello. The key never leaves the device.
Honest limits today
- Sealing is opt-in. A new note saves as a plain .txt file, and autosave keeps plain notes plain, until you use Save As with a sealed format and a passphrase.
- File names are not encrypted, so name sealed notes carefully.
- The app has an optional sync setting, off by default. When it is on and you are signed in, it uploads the text of your notes to QOL's servers without encryption, sealed notes included. Leave it off. An encrypted cloud vault is Coming
- Read aloud's natural voices use Microsoft's online speech service, so the text being read goes over the network. The built-in Windows voices stay on your PC.
- The classic ciphers (Caesar, Atbash, Rail Fence, Playfair) can still open old files, labelled not secure. New saves use AES-256-GCM.
- No download yet. Qryptic is not released.
- No installer yet, and the app is not code-signed yet, so Windows may warn you when it first runs.
The Qryptic family
Every edition has its own home
One app family, separate editions.
Qryptic Code and Code+
Encrypted notes built for code: code blocks, repo notes and secrets.
qryptic.locker
Qryptic Ultimate
In development: every edition in one Windows app, with your own serial number.
ultimate.qryptic.one
Build your own
Pick the features you want and see which edition covers them.
qryptic.one/build
Part of QOL
One account for QOL
QOL ID is QOL's one account. Signing in to Qryptic with it, with purchases and serials attached, is Coming
Not released yet. Join the list.
Leave your email and we will tell you when Qryptic is ready to download.