Lockpad
6.3#18 in secure notes appsFree planFree planWebSelf-hosted
Visit
| Fact | Lockpad | PrivacyNotes |
|---|---|---|
| Encryption | Notes can be encrypted in the browser per note using Argon2id and AES-GCM; the key and plaintext stay in the browser tab. | The clients encrypt note data locally with XChaCha20-Poly1305 before synchronization. |
| Integrations | The README lists imports from Google Keep and Standard Notes and describes Tailscale for private remote access. | Sign-in can use Google, Apple or GitHub, while Bitwarden, browser passwords and browser bookmarks have import paths. |
| Security reporting | Security vulnerabilities should be reported privately by email or through a private GitHub security advisory, not as a public issue. | Security vulnerabilities can be reported to [email protected], with coordinated disclosure offered when needed. |
Lockpad suits an individual who wants a self-hosted web notes app with import and export options. It may also fit someone who wants per-note browser encryption and is comfortable deploying Docker.
PrivacyNotes may suit people who want an offline-capable workspace with encrypted sync and several import options. Its self-custody setup is for users prepared to safeguard their recovery phrase.