Today
Code blocks with one-click copy
Fenced code blocks show their language and copy in one click.
Qryptic Code ยท Encrypted notes for developers
Seal your code notes.
Qryptic Code is the planned edition for code. The Qryptic app can already seal snippets, repo notes and secrets with AES-256-GCM on your own Windows PC, fully offline.
Windows desktop app. Not released yet. No download yet.
Ships today
What it does for code today
Today there is one Qryptic app, and everything in this section is in it.
Today
Sealed secrets notes
Keep a .env-style note of keys and tokens sealed with AES-256-GCM.
Today
Repo folders
Group notes into repo-style folders inside your own vault folder.
Today
AES-256-GCM encryption
The default seal is AES-256-GCM. The key comes from your passphrase through PBKDF2-SHA256 at 600,000 iterations, with a fresh random salt and IV on every save.
Today
Tamper detection
Every AES-256-GCM seal carries a 128-bit tag. A wrong passphrase, or any change to the sealed text (salt, IV or ciphertext), is rejected with an error instead of opening as scrambled text.
Today
Fully offline
No account needed to write, seal or open a note. Your notes are files on your PC.
Also in the app today
- Fails closed
- Safe upgrades
- Block editor
- Tabs and real files
- 26 themes
- Read aloud
- Custom theme builder
Editions
Two editions of Qryptic Code
Qryptic Code and Code+, both planned. Code adds tools for code; Code+ adds stronger locks and tools for secrets and repos. Pricing is not set yet.
Built for code
Qryptic Code
Planned: the notepad built for code, with code blocks, repo notes and secrets you can seal.
Everything in Qryptic, plus- Line numbersNumbered lines in the editor.Coming
- Syntax highlightingColor for code blocks. Today they render as plain text.Coming
- Encrypted snippet vaultTag, search and copy your snippets, all sealed.Coming
Pricing not set yet
Join the list
Code, locked harder
Qryptic Code+
Planned: Qryptic Code with the stronger locks, plus tools for secrets and repos.
Everything in Qryptic Code, plus- Custom theme builderDesign your own palette and save it as a theme. In the current app for everyone today. Which edition keeps it is a draft.Today
- Argon2id key stretchingMemory-hard key derivation. It makes guessing a weak passphrase on graphics cards far more expensive.Coming
- Key filePassphrase plus a file, for example on a USB stick. A stolen passphrase alone will not open the note.Coming
- Multicrypt cascadeAES-256-GCM plus XChaCha20-Poly1305: insurance if one cipher is ever broken. It does not help against passphrase guessing.Coming
- PIN clipboard vaultClipboard history behind a quick PIN, rate-limited and sitting on top of your vault key. A convenience lock, not extra encryption.Coming
- Secret-aware notesMasks values, copies one value at a time, spots keys like sk_live_ and warns before a plain-text save.Coming
- Repo toolsA passphrase per repo, version history, diff and encrypted repo export.Coming
Pricing not set yet
Join the list
Planned line-up. Features marked Coming are not in the app yet, and the line-up can change before launch. Nothing is on sale yet.
Security, in plain words
How a note is sealed
These are the facts of the app as it is today. Sealing is a choice you make per note. No marketing numbers.
When you seal a note, today
- Cipher
- AES-256-GCM, the default seal
- Key from your passphrase
- PBKDF2-SHA256, 600,000 iterations
- Salt
- 16 random bytes, new on every save
- IV
- 12 random bytes, new on every save
- Tamper check
- 128-bit tag on every AES-256-GCM seal. A wrong passphrase, or any change to the sealed text, is rejected
- No passphrase
- Saving a sealed note stops. It never writes the note in plain text
A sealed note on disk
QGCM1.salt.IV.ciphertext + tag
Stronger locks, coming
Planned as extra layers on top of AES-256-GCM, never as a replacement.
- Argon2id key stretching Coming
Memory-hard key derivation. It makes guessing a weak passphrase on graphics cards far more expensive.
- Key file Coming
Passphrase plus a file, for example on a USB stick. A stolen passphrase alone will not open the note.
- Multicrypt cascade Coming
AES-256-GCM plus XChaCha20-Poly1305: insurance if one cipher is ever broken. It does not help against passphrase guessing.
- Hardware security key Coming
Unlock with a FIDO2 key or Windows Hello. The key never leaves the device.
Honest limits today
- Sealing is opt-in. A new note saves as a plain .txt file, and autosave keeps plain notes plain, until you use Save As with a sealed format and a passphrase.
- File names are not encrypted, so name sealed notes carefully.
- The app has an optional sync setting, off by default. When it is on and you are signed in, it uploads the text of your notes to QOL's servers without encryption, sealed notes included. Leave it off. An encrypted cloud vault is Coming
- Read aloud's natural voices use Microsoft's online speech service, so the text being read goes over the network. The built-in Windows voices stay on your PC.
- The classic ciphers (Caesar, Atbash, Rail Fence, Playfair) can still open old files, labelled not secure. New saves use AES-256-GCM.
- No download yet. Qryptic is not released.
- No installer yet, and the app is not code-signed yet, so Windows may warn you when it first runs.
The Qryptic family
Every edition has its own home
One app family, separate editions.
Qryptic and Qryptic+
The encrypted notepad today, and a Plus edition with stronger locks, planned.
qryptic.one
Qryptic Ultimate
In development: every edition in one Windows app, with your own serial number.
ultimate.qryptic.one
Build your own
Pick the features you want and see which edition covers them.
qryptic.one/build
Part of QOL
One account for QOL
QOL ID is QOL's one account. Signing in to Qryptic with it, with purchases and serials attached, is Coming
Not released yet. Join the list.
Leave your email and we will tell you when Qryptic Code is ready to download.