HushJournal

A private journal

Write freely.
Stay unread.

Your notes are locked on your device. We never see what you write.

Open your journal Blog

Features

Only you can read it

Your notes are locked on your device before they are saved. We keep the locked copy and never see what you wrote.

Journals, notebooks, pages

A journal holds notebooks. Each notebook holds your pages.

Your secret stays with you

The words that unlock your journal never leave this device. You can change them later. Your notes stay as they are.

Mask it from prying eyes

Cover notebook and page names you aren't reading, so a glance over your shoulder stays empty. The icons stay.

A look for each journal

Give each journal its own colors. Only that journal's pages change.

Open source

The app is public under the AGPL v3 license. You can read the code, share it, and run your own copy.

Screenshots

Sign in page with Google and a username and password
Sign in with Google or a username and password.
Journal list with a locked journal and a button to create a new one
Each journal stays locked until you enter its passphrase.
New journal dialog asking for a name and passphrase
Create a journal. The passphrase is derived on this device and is not stored on the server.
Unlock journal dialog with a passphrase field
Unlock a journal. The server never sees the passphrase.
Notebook of dated entries with the page editor open
A notebook of entries. Titles and content are encrypted before they leave the browser.
Theme picker with color swatches for a journal
Each journal can use one of 20 color themes. The theme name is stored as plaintext.

Questions

Short answers before you start a journal.

Can anyone else read my notes?
No. Notebook names, page titles, and page text are locked on your device before they are saved. We keep the locked copy. We do not have the secret that opens it, and we do not try to unlock it.
What if I forget the secret that unlocks a journal?
We cannot reset that secret or open the notes for you. If you saved a hint, it is ordinary text and can be shown before you unlock. The notes themselves stay locked.
How do I sign in?
With Google, or with a username and password. The secret that unlocks a journal is separate from your sign-in, and it never leaves your device.
What is stored as ordinary text?
Journal names, an optional hint, colors, and whether names are masked. Notebook names, page titles, and page text are stored only in locked form. A page also keeps its calendar date.
Can I change the secret later?
Yes. You can change the words that unlock a journal. Your notes stay as they are.
What does masking do?
It covers notebook and page names you are not reading, so a glance over your shoulder stays empty. The icons stay.
Can each journal look different?
Yes. You can give each journal its own colors. Only that journal's pages change. Sign-in and the journal list stay as they are.
What happens if I delete my account?
Deleting your account removes the account and the journals stored with it. A backup may keep a copy for a short time. Locked notes in a backup still cannot be read by us.