Notesnook

A freelance researcher juggling client notes across a phone, tablet, and laptop hits a paywall as soon as a commercial service caps sync to two devices. Notesnook avoids account restrictions by keeping note creation and multi-device synchronization unmetered. All text and attachments are encrypted locally on the device before any data reaches the sync network.

Why Notesnook instead of Evernote

Evernote stores and indexes notes, attachments, and metadata on remote servers. That architecture enables server-side search across images and documents, but it leaves personal records readable to company systems or vulnerable in data breaches. Notesnook uses client-side zero-knowledge encryption with XChaCha20-Poly1305 and Argon2. Keys stay on the user device, so sync servers receive only ciphertext. Notes can be written offline across desktop and mobile, uploading updates automatically once reconnected.

Operational trade-offs follow this model. Evernote limits unpaid accounts to fifty notes and one active device, turning multi-device access into an expensive subscription. Notesnook supports unlimited notes across unlimited devices on its free tier, with clients for Linux, macOS, Windows, Android, iOS, and the web. Teams and individuals wanting full data control can also self-host the official sync server via Docker. The compromise is feature parity: Notesnook cannot index scanned PDF text or run remote search on attachments because the server never decrypts user data.

What it does well

• Multi-device sync functions across desktop, mobile, and web without hardware limits or device caps.
• Device-level zero-knowledge encryption secures notes, notebooks, and attachments with private keys derived from user passwords.
• A formatted text editor supports rich typography, checklists, tables, formulas, and internal note links.
• Note locking adds biometric or password protection to individual entries and private journals.
• A browser web clipper saves articles, clean page text, and bookmarks directly into notebooks.
• Local export tools output standard Markdown, HTML, or plain text archives without platform lock-in.

Limitations

• The cryptographic implementation has not completed an independent third-party audit, though client and server code is public on GitHub.