Your workspace, on any device

Signed in, synced, and encrypted with a key we never receive.

Prefer to keep everything on one machine with no account at all? Use the on-device portal — it is free, and every register is in it.

Create an account

One password. It authenticates you and, separately, encrypts your workspace — we only ever receive the half that cannot decrypt anything.

Your recovery key

Write this down or put it in a password manager now. It is shown once, we do not keep a copy, and it is the only way back if you forget your password.

Resetting your password will not decrypt your records. It proves you own the email address and gets you back into the account. Only this key, or a passkey you add later, reopens the workspace itself.

Type it back

Not bureaucracy — this is the only check that it exists somewhere other than the screen you just closed.

Signed in, but sealed

Your password opened the account but did not open the workspace — so a different password sealed these records. Your recovery key will open them.

Reset your password

We will email you a link. Before you use it, find your recovery key — read the note below, because this is the part that surprises people.

A reset gives you back the account, not the records. Your workspace is encrypted with a key derived from your password, and we do not have it. Resetting proves you own this email address and lets you sign in — your recovery key or a registered passkey is what reopens the workspace itself. Without either, you will have an account you can reach and records nobody can decrypt, including us.

Set a new password

Resetting . Add your recovery key here and the workspace is re-sealed under the new password in one step.

Move this workspace to an account

Your records are copied, re-sealed for the account, and checked. The copy on this device is not written to at all — not one byte — and if anything goes wrong you carry on here as before.

Any passkeys you have added keep working — they unlock the same workspace and are carried across unchanged.

Moved, and checked

The uploaded copy was downloaded again, decrypted independently, and compared against the original before anything switched over.

SHA-256

The copy on this device has been left in place on purpose. Once you are satisfied the account works — ideally after signing in on a second device — you can remove it from Settings. Until then you have two working copies, which is the safer way round.

Add a passkey to this device?

Face ID, Windows Hello or a security key. It opens this workspace on this device without your password — and because it unlocks the records themselves, it is a second way back if you ever forget that password.

The passkey never leaves this device and we never see it. Skipping is fine — you can add one at any time from Settings. Your recovery key still works either way.

Your records are back. Set a password.

The recovery key opened your workspace. It is still sealed under the old password, so choose a new one now — otherwise the next device you sign in on will ask for the recovery key all over again.

Any passkeys you have added keep working — they wrap the same key and a password change does not touch them.