Encryption and Privacy

Some notes are nobody's business. MojoPad encrypts at two levels, both with AES-256-GCM and scrypt key derivation — modern, audited primitives.

Encrypting a page

Edit ▸ Encrypt Page… (⇧⌘E). Choose a password (and an optional hint). From then on the page's content exists on disk only as ciphertext. Locked pages show a lock screen in the editor and a 🔒 in the page list, and they are excluded from search, linking, exports, AI indexing, the web server, and Static Publishing — no leaks through side doors. Unlock with the password; the page stays unlocked until the document closes (or the re-lock timer fires).

Encrypting a document

File ▸ Set Document Password… protects the whole document: every page's name and content is encrypted at rest, and the document demands the password when opened. Change or remove the password from the same menu (you'll need the current one). There is no recovery — MojoPad never stores your password; a forgotten password means the content is gone. That's the point.

The re-lock timer

Settings ▸ Security ▸ Re-lock encrypted content: after 1, 5, 15, or 60 idle minutes, unlocked encrypted pages lock themselves (their plaintext is dropped from memory) and password-protected documents close. Off by default; recommended on a shared Mac.

The wider privacy story

• Your documents are local files. Nothing syncs anywhere unless you put it somewhere.
• All AI features run on your own Mac via Ollama — no page content ever leaves the machine. See Local AI.
• The semantic index (which contains content-derived vectors) is encrypted along with password-protected documents.
• MojoPad phones home to exactly nobody.