Your Notes, Truly Private
End-to-end encrypted notepad with zero-knowledge architecture
Features • Tech Stack • Architecture • Getting Started • API • Screenshots
Cryptora is a privacy-first encrypted notepad where your notes are protected with bank-level security. Unlike other note apps, your password never leaves your device—all encryption happens in your browser before anything touches our servers.
🛡️ Zero-Knowledge: We literally cannot read your notes, even if we wanted to.
 Zero-Knowledge Your encryption key never touches our servers |
 Bank-Level Security AES-256-GCM encryption standard |
 Private by Default No tracking, no analytics, no data collection |
 Instant Access No sign-up required, just alias & password |
 Auto-Save Changes saved automatically as you type |
 One-Click Copy Copy your notes instantly to clipboard |
| Technology | Purpose | Why? |
|---|---|---|
 |
Core Language | Robust, readable, extensive crypto libraries |
 |
API Framework | Async, fast, auto-documentation |
 |
Database | ACID compliance, secure data storage |
 |
ORM | Type-safe database operations |
 |
Migrations | Version-controlled schema changes |
 |
ASGI Server | Lightning-fast async server |
| Technology | Purpose | Why? |
|---|---|---|
 |
UI Framework | Component-based, reactive UI |
 |
Language | Type safety, better DX |
 |
Build Tool | Instant HMR, fast builds |
 |
Styling | Utility-first, rapid UI development |
 |
Animations | Smooth, professional animations |
 |
Components | Beautiful, accessible components |
┌─────────────────────────────────────────────────────────────────┐
│ CLIENT BROWSER │
│ ┌─────────────────────────────────────────────────────────┐ │
│ │ React + TypeScript + Tailwind + Framer Motion │ │
│ │ ┌─────────────┐ ┌─────────────┐ ┌────────────┐ │ │
│ │ │ Editor │ │ Encryption │ │ Notes │ │ │
│ │ │ Component │───▶│ (AES-256) │───▶│ List │ │ │
│ │ └─────────────┘ └─────────────┘ └────────────┘ │ │
│ └─────────────────────────────────────────────────────────┘ │
│ │ │
│ Encrypted Data Only │
│ ▼ │
└──────────────────────────────┼──────────────────────────────────┘
│
▼
┌─────────────────────────────────────────────────────────────────┐
│ BACKEND SERVER │
│ ┌─────────────────────────────────────────────────────────┐ │
│ │ FastAPI + Python + SQLAlchemy │ │
│ │ ┌─────────────┐ ┌─────────────┐ ┌────────────┐ │ │
│ │ │ REST │ │ Business │ │ ORM │ │ │
│ │ │ API │───▶│ Logic │───▶│ Layer │ │ │
│ │ └─────────────┘ └─────────────┘ └────────────┘ │ │
│ └─────────────────────────────────────────────────────────┘ │
│ │ │
│ ▼ │
│ ┌─────────────────────────────────────────────────────────┐ │
│ │ PostgreSQL Database │ │
│ │ Stores only encrypted blobs - Zero Knowledge │ │
│ └─────────────────────────────────────────────────────────┘ │
└─────────────────────────────────────────────────────────────────┘
- Python 3.8+
- Node.js 18+
- PostgreSQL 12+
# Clone the repository
git clone https://github.com/divinixx/Cryptora.git
cd Cryptoracd backend
# Create virtual environment
python -m venv venv
venv\Scripts\activate # Windows
# source venv/bin/activate # macOS/Linux
# Install dependencies
pip install -r requirements.txt
# Configure environment
cp .env.example .env
# Edit .env with your PostgreSQL credentials
# Run migrations
alembic upgrade head
# Start server
uvicorn app.main:app --reload --port 8000cd frontend
# Install dependencies
npm install
# Start development server
npm run dev| Service | URL |
|---|---|
| 🌐 Frontend | http://localhost:5173 |
| 🔌 Backend API | http://localhost:8000 |
| 📚 API Docs (Swagger) | http://localhost:8000/docs |
| 📖 API Docs (ReDoc) | http://localhost:8000/redoc |
| Method | Endpoint | Description |
|---|---|---|
GET |
/health |
Health check |
POST |
/api/v1/auth/register |
Create new user |
POST |
/api/v1/auth/login |
Authenticate user |
GET |
/api/v1/{alias}/notes |
Get all notes |
POST |
/api/v1/{alias}/notes |
Create new note |
GET |
/api/v1/{alias}/notes/{id} |
Get specific note |
PUT |
/api/v1/{alias}/notes/{id} |
Update note |
DELETE |
/api/v1/{alias}/notes/{id} |
Delete note |
# Create encrypted note
curl -X POST http://localhost:8000/api/v1/myalias/notes \
-H "Content-Type: application/json" \
-H "X-Password: your-master-password" \
-d '{
"title": "My Secret Note",
"content": "This gets encrypted before storage"
}'Cryptora/
├── 📂 backend/
│ ├── 📂 app/
│ │ ├── 📂 models/ # SQLAlchemy models
│ │ ├── 📂 schemas/ # Pydantic schemas
│ │ ├── 📂 routers/ # API endpoints
│ │ ├── 📂 services/ # Business logic
│ │ ├── 📄 config.py # Configuration
│ │ ├── 📄 database.py # DB connection
│ │ └── 📄 main.py # FastAPI app
│ ├── 📂 alembic/ # Migrations
│ ├── 📄 requirements.txt
│ └── 📄 run.py
│
├── 📂 frontend/
│ ├── 📂 src/
│ │ ├── 📂 components/ # React components
│ │ │ ├── 📂 ui/ # ShadCN components
│ │ │ └── 📂 notes/ # Note components
│ │ ├── 📂 pages/ # Page components
│ │ ├── 📂 context/ # React context
│ │ ├── 📂 lib/ # Utilities
│ │ ├── 📄 App.tsx
│ │ └── 📄 main.tsx
│ ├── 📄 package.json
│ └── 📄 vite.config.ts
│
└── 📄 README.md
┌────────────────────────────────────────────────────┐
│ YOUR BROWSER │
│ │
│ Password ──▶ Derive Key ──▶ Encrypt ──▶ Send │
│ 🔑 🔐 🔒 📤 │
│ │
│ ✅ Password stays here │
│ ✅ Key derived locally │
│ ✅ Only encrypted data leaves │
└────────────────────────────────────────────────────┘
│
▼
┌────────────────────────────────────────────────────┐
│ OUR SERVER │
│ │
│ ❌ Never sees password │
│ ❌ Cannot decrypt content │
│ ✅ Stores encrypted blobs only │
└────────────────────────────────────────────────────┘
Landing Page
Dashboard - Your Encrypted Notepad
Contributions are what make the open-source community amazing! Any contributions you make are greatly appreciated.
- Fork the Project
- Create your Feature Branch (
git checkout -b feature/AmazingFeature) - Commit your Changes (
git commit -m 'Add some AmazingFeature') - Push to the Branch (
git push origin feature/AmazingFeature) - Open a Pull Request
Distributed under the MIT License. See LICENSE for more information.
Built with ❤️ for everyone who values privacy
Your thoughts deserve to stay yours.
