Giter VIP home page Giter VIP logo

keshav-space / safenotes Goto Github PK

View Code? Open in Web Editor NEW
206.0 8.0 21.0 10 MB

Safe Notes is a security project aimed at providing an encrypted, private note manager that works locally and protects notes from various threat actors.

Home Page: https://safenotes.dev

License: GNU General Public License v3.0

Kotlin 0.06% Dart 96.55% Python 1.65% JavaScript 0.51% Ruby 0.56% Swift 0.27% Objective-C 0.02% Makefile 0.38%
encryption notes-app localization anonymity hacktoberfest flutter privacy security android dart

safenotes's Introduction

Safe Notes

Encrypted, Private note manager.

      



ScreenshotsDescriptionFeaturesInstallation and updatesContributionPrivacy PolicyLicense

WebsiteReporting a BugFAQPress


Screenshots

    
    

Description

Safe Notes is a privacy-focused note manager which provides an inbuild encrypted storage. It imploys rigorously tested AES-256 encryption standard to store user notes. All the notes are stored locally on the user's device. Contrary to the ongoing frenzy of "move everything to cloud" we believe in "localization of user data" giving you the control of your data and not some third-party cloud service provider. We know you gotta change your device once in a while that's why Safe Notes also provides a secure migration facility, which allows you to export and import your notes without having to compromise the sanctity of your data. Word of advice, keep your passphrase long and secret. May encryption protect us all!

Important

With great security comes the great responsibility of remembering the passphrase!

Features

  • Encrypted AES-256 storage
  • Biometric authentication
  • Android background snapshot protection
  • Incognito Keyboard
  • Brute-force protection
  • Prevents data snooping via adb
  • Inactivity guard
  • Automated encrypted backup
  • Beautiful Arctic Nord style dark/light theme
  • List and grid view
  • Colorful notes
  • Seamless migration to new device 
  • Completely anonymous no inbound and outbound request

Warning

Some security features cannot be guaranteed to work if you are using a rooted device.

Installation and updates

You can install Safe Notes using one of the following methods:

  1. Download Safe Notes from the Google Play store using this link.
  2. Download Safe Notes from the F-Droid using this link.
  3. Download the APK from Github Releases and install it.
  4. Build a debug APK yourself. This is the fastest way to get new features on your device, but is much more complicated, so we recommend using one of the other methods.

We recommend method 1 or 2 for most users. Building a debug APK using method 4 excludes a key entirely. Signing keys help ensure that a user isn't tricked into installing a malicious update to an app.

Contribution

Whether you have ideas, design changes, code cleaning, or real heavy code changes, help is always welcome. The more is done the better it gets!
If you'd like to get involved, check our contribution notes.

Help translate Safe Notes on Hosted Weblate
Translation status

Privacy Policy

The Safe Notes project aims to provide a encrypted, private, anonymous experience for local note storage. The app doesn't send any outbound requests neither does it receives any inbound requests. Hence, it doesn't collect any data whatsoever. You can find the document here.

License

GNU GPLv3 Image

Safe Notes is Free Software: You can use, study share and improve it at your will. Specifically GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

Supporters

Weblate is helping with continuous localization as part of their ongoing support for libre software projects.

safenotes's People

Contributors

abn-anik avatar and4po avatar atalanttore avatar bost0n avatar comradekingu avatar dperruso avatar fnogcps avatar ghoevil avatar julienjthomas avatar keshav-space avatar luanrt avatar millerii avatar nature-modren avatar oersen avatar pchelium avatar rehork avatar thedarkkronos avatar toredane avatar tyeclipse avatar weblate avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

safenotes's Issues

Making a case for `ChaCha20-Poly1305` ??

The aim is to let user choose from the pool of competent encryption algorithm that best suits their need:

  • AES256 in Cipher Block Chaining mode - [ currently available ]
  • ChaCha20 ( with 192-bit nonces and message authentication using Poly1305 )

ChaCha20 is relatively faster compared to AES on older devices, but most modern mobile-phone processors supports AES-NI thus making AES also faster.

UI for advanced settings

  • toggle for incognito keyboard [default: incognito always on] #22
  • set duration for inactivity guard [default: lock after 5 minutes of inactivity] #11

Sync via webdav or/and google-drive

Is your feature request related to a problem? Please describe.
I need to syncronise my notes on different devices, so sync via webdav (on self-hosted serer) or google drive is required.

Describe the solution you'd like
Sync option. Conflicts can be resolved by copying conflicting version (and notifying the author!) or attempt to merge and copying on fail. Another option for copying can be appending new version to old after special delimiter and marking this note as bad-merged.

Describe alternatives you've considered
I use Joplin now, it makes sync well. I believe you can make better :)

folders, hashtags, Markdown and more

I would like to suggest a few ideas:

  1. Folders; a very handy addition
  2. Hashtags; even hundreds of notes could easily be distributed
  3. Several colored themes.
  4. Ability to change notes with a long press
  5. Ability to enable/disable Markdown formatting in settings
  6. Ability to add pictures and videos

Bugs and problems

  1. While writing a note, the virtual keyboard covers the bottom part of the note

  2. The Title covers a part of the note instead of being a part of it, which is inconvenient

As for note design, I would like to suggest to get ideas from Leaflet (https://github.com/PotatoProject/Leaflet) and MIUI Notes

Document security policy

including but not limited to Encryption techniques, user input and import file sanitization, Gradle check sum inclusion for F-Droid builds, disabling default android backup (though the user can explicitly generate data backup from the app itself), and rooted device handling

Merge Automatic Backup and Manual Export into one "Backup Notes" Setting

Both Automatic Backup and Manual Export are setting sections to make backup files for your notes so why are they two rows in settings? It is a bit awkward. It is also awkward you use the word "export" instead of "backup". You are referring to exporting a backup file, of course, but the key word and more universally understood word is backup, not export.

Why not create one setting called "Backup Notes" and then within that have a manual backup file creating option and an automatic backup feature in the same place.

This also makes sense because right now you have two places to choose the path to the backup folder which is the same function. You can click on "Manual Export" and a Destination Folder dialog pops up where you chose a folder to place the file in or you can click on "Auto Backup" then choose a folder there to set it as a default. In there you also have a "Backup Now" option so you are really able to do everything inside of the Auto Backup section anyway.

I would rename "Auto Backup" to "Backup Notes" and eliminate "Manual Export" then within Backup Notes have a feature "Choose Backup Folder" and another "Backup Now" and another for "Auto Backup" which when turned on triggers an immediate Backup Now then remains on as it does so now. To create the feature of backing up to another folder which is NOT the default backup folder, you can also have "Manual Export" inside of the Backup Notes section but change the name because "Backup Now" is also a "manual" process. Only "Auto Backup" is not "manual".

Here is the hierarchy, naming, and order I suggest:

Backup Notes

  1. Choose Default Backup Folder
  2. Auto Backup
  3. Force Backup Now
  4. Manual Backup to Chosen Destination

Something like this. Let's discuss...

refine file import workflow

  • Passphrase not needed while importing notes on the same device provided passphrase hasn't changed.
  • Show confirmation dialog that x no. of notes will be imported before executing the import.

Desktop version (linux at least)

Is your feature request related to a problem? Please describe.
I use my notes as on my phone, as on my linux laptop. I really need a desktop version too.

Describe the solution you'd like
A native app, supporting tray icon for fast open ad notifications.

Describe alternatives you've considered
I use Joplin now, but I believe this project can outrun it.

[BUG] Weblate locked

Some strange merge conflict in Weblate

https://hosted.weblate.org/projects/safe-notes/safe-notes-app/#alerts Rebasing (1/1)error: could not apply ad81a72... set locale for timeagoResolve all conflicts manually, mark them as resolved with"git add/rm <conflicted_files>", then run "git rebase --continue".You can instead skip this commit: run "git rebase --skip".To abort and get back to the state before "git rebase", run "git rebase --abort".Could not apply ad81a72... set locale for timeagoAuto-merging README.mdCONFLICT (content): Merge conflict in README.md(1)

Why a conflict in the README would arise I have no idea about, nor how it declares a locale, but
if you add "kingu" in https://hosted.weblate.org/access/safe-notes/#users I can have a look.
Is it set to look for new components?

set android:allowBackup to false

Set android:allowBackup flag to false. By default it is always true and allows anyone to backup application data via ADB (when USB debugging is enabled).

This is solely meant to prevent any kind of metadata reconnaissance since user data is already encrypted and threat actors aren't going to get anything from there.

Some design ideas [Updated]:

I would like to suggest some ideas, for the design, I wrote about it before, but I want to add to it now.
Here is a list of apps whose design is really good:

They have a lot in common, but different applications have their own features

F-droid?

Link to FDroid is dead and seems its not in FDroid listed (or I'm blind 🤔 )

Fingerprint authentication is a must have feature...

  1. Problem: I'm always frustrated while putting the passphrase every time at login...
  2. Solution: Having the basic concept of encryption I hope there are secure ways to integrate fingerprint authentication with the app eliminating the need of putting passphrase every time which is a must have feature in such a polished and perfect note-taking app.... It should not be considered just a feature, but rather a necessity for mobile devices... Password managers like KeepassDX and Bitwarden and so on, being so critical in security perspective, offers fingerprint auth.. Why not this amazing note taking app?
  3. Extra: I really like the line saying "with great security comes the great responsibility of remembering the passphrase".. But I believe that the ease of logging in with biometric auth should be made available.... Rest is the users' decision....
  4. You do your best... Users will see the rest😇...And thanks man for offering the community with such a beautiful, secure, and offline alternative..

Some suggestions of enhancement!

Some suggestions of enhancement!

Sidebar

  1. Put the 'color setting' under the 'white/black mode' , so could see the color changes quickly!

  2. Remove the 'import backup' and 'Change passphrase' of sidebar, no need to put here.

  3. Put the 'setting' button above the 'exit' button.

Setting page

  1. The chinese of 'language' and 'language name' in setting page is not correct.
    It should be '语言' and '简体中文' .

  2. Remove the 'exit' of setting page. No need here!

LogOut On Inactivity Always Logs Out in 1 Minute

No matter what I choose for the value of the LogOut on Inactivity setting, I am being logged out in 1 minute. I leave the app for 1 minute and I need to reenter the password.

Pixel 5, LineageOS 19.1

This is a problem for me in Safe Notes 2.1.0 and was also happening in version 2.0.

[Bug] Backup doesn't work

It didn't work, neither in automatic mode nor when I tried to make it manually. I changed folders and backup locations, but nothing changes

Pinning

Hi sir thank you a lot for your hard work really appreciated , kindly I would like you to considering add pinning favorite note feature thanks again🙌

Translation

Is your feature request related to a problem? Please describe.
Is there a way to translate the strings? I'd love to translate the app in Romanian.

Describe the solution you'd like
Add a translation ghide or something for contribuitors.

Describe alternatives you've considered

Additional context

Feature Request

It would be really nice if there were passphrase alternatives such as patterns or biometrics. It would go really far towards ease of use if either of those options were to be made available.

[BUG] Cannot change Auto-Backup Folder when already enabled

Describe the bug
Changing the auto-backup destination folder is not possible, if the feature was already enabled.

To Reproduce
Steps to reproduce the behavior:

  1. Enable Auto-Backup.
  2. Go out of the Auto-Backup settings.
  3. Enter Auto-Backup Settings.
  4. You cannot change the destination folder.
  5. You must disable and enable Auto-Backup to be able to change the destination folder.

Expected behavior
The folder should be changeable after the feature has been enabled.

simple list view,subcategory,keyfile...

I have some ideas as below,

  1. simple list view (title only).
  2. sub catagory or sub folder, and better with tags.

such as

AAA/AAA1/note1,note2...
AAA/AAA2/
BBB/
...
  1. fingerprint to unlock.
  2. alternative password, or a keyfile. !important! if i forgot the main pass, i can use it to unlock !!!

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.