Skip to main content

Use case

Encrypted Notes for Personal Use

Most personal use of encrypted notes is unglamorous: sending a family member a login, writing something down that you would rather not leave in a notes app that syncs to a company you have never thought about.

Last reviewed Reviewed by Inkrypt Security Team

Everyday situations

  • Sharing a streaming or utility login with family. These end up in group chats, where they stay visible to everyone in the group indefinitely — including people who join later.
  • Sending the Wi-Fi password to a guest without it living in their chat history forever.
  • Travel details. Passport numbers, booking references and insurance policy numbers, sent to a travelling companion with an expiry matching the trip.
  • Private drafts. A difficult message, a resignation letter, a journal entry — text you want to write somewhere that is not synced to a cloud account tied to your identity.
  • Handing something to your future self on a different device, without emailing it to yourself.

None of these are high-stakes on their own. What they share is that the obvious channel leaves a permanent, searchable copy in an account that will eventually be breached, inherited, or read by someone you did not anticipate.

Why chat history is the actual problem

Messaging apps are designed to remember everything, and that design is usually what you want. It is exactly wrong for credentials.

A bank login sent to a partner in 2022 is still in that conversation, still searchable, and still valid if the password has not changed. If either phone is lost unlocked, or either account is compromised, or the conversation is exported during some future dispute, that credential goes with it. The exposure did not exist at the moment of sending — it accumulated afterwards.

A useful habit

Ask: "would I mind if this message were still readable in five years?" If the answer is yes, it belongs somewhere that expires.

Sensible practice for personal use

  1. Use a password you can say out loud

    For personal sharing the password usually travels by voice. Three or four random words is both strong and easy to dictate.
  2. Do not send both halves in the same chat

    Link in the chat, password spoken aloud or in a phone call. Same message means no separation at all.
  3. Set expiry to match the need

    A guest Wi-Fi password needs an hour. Travel details need the length of the trip. Longer than necessary is exposure with no benefit.
  4. Keep the note name boring

    The name becomes the URL. holiday-notes is fine; mum-bank-login is not.

What this is not for

  • Your main password store. Use a password manager. It syncs, autofills, warns you about breaches, and does not expire.
  • Important documents. A note with no recovery path is the wrong place for anything you cannot afford to lose.
  • Estate planning. If someone needs access after you die, they need a durable arrangement, not something that expires and cannot be recovered.
  • Anything you need to find again later. There is no search, no folders and no account. By design, notes are meant to be temporary.

No recovery means no recovery

If you forget the password, the note is gone — we cannot restore it, because we hold no key. For anything you would be upset to lose, keep a second copy somewhere you control.

Privacy without an account

There is no signup, so there is no profile, no email address on file, and no history linking your notes to each other or to you. That is the point of the design, and it is what makes it reasonable to use for a one-off private thought rather than committing to yet another account.

The trade-off is symmetrical: no account also means no sync, no note list, and no way to prove a note is yours. If you lose the URL, you lose the note. Exactly what you are getting, and exactly what you are giving up, is documented on the privacy policy page.

Frequently asked questions

Do I need an account to use Inkrypt?

No. There is no signup, no email address and no profile. You name a note, write it, set a password, and that is the whole flow.

Can I use this instead of a password manager?

No. A password manager stores hundreds of credentials permanently, autofills them and warns you about breaches. Encrypted notes are for one-off text you want to expire, which is the opposite requirement.

Is it safe to share a note in a family group chat?

Share the link there if you like — the link alone cannot open the note. Just make sure the password travels another way, spoken aloud or by phone. Putting both in the same chat removes the entire benefit.

Can I find my old notes?

Only if you remember the URL. With no account there is no note list and no search. Notes are designed to be temporary, so treat anything you need long-term as belonging elsewhere.

Write your first encrypted note

No account, no email address, no download. Type a note, set a password, share the link.

Open the notepad