Private Notes That Only You Can Read

Your notes are encrypted before they leave your device

bpad uses zero-knowledge encryption: your notes and images are encrypted in your browser using AES-256-GCM before they reach the server. The server stores only ciphertext — neither bpad's servers nor anyone operating them can read your content.

Everything you write stays private

• Zero-knowledge encryption — everything is encrypted in your browser before reaching the server.
• Biometric unlock — unlock with a fingerprint or Face ID on supported devices.
• Configurable auto-lock — the vault locks after inactivity (1, 5, 15, 30, or 60 minutes).
• Recovery code — a one-time recovery code lets you recover access if you forget your password.
• Encrypted backup — download all notes and images as a passphrase-protected ZIP.

Private Markdown notes, available everywhere

bpad works offline and installs as a PWA on your home screen. Your notes are cached locally so you can read them without an internet connection.