Palimpsest

about

description

Palimpsest is an encrypted diary and notes app with **deniable vaults**: one password field, any number of vaults, and no way to tell from the file how many there are. Every password opens its own vault. A decoy password shows a believable diary; another shows the real one. **Experimental, not audited.** It protects against a curious partner, a thief and a quick border check. It does not protect against a forensic lab, spyware on the phone, or someone who keeps demanding passwords. If an adversary keeps copies of the file from different moments and knows a decoy password, a hidden vault can give itself away. The threat model in the source repository has the details. **Writing** - Notes in a grid with folders, tags, pins and colours; a diary with a timeline and a month calendar; to-dos - Markdown editor that hides the markers away from the line you edit - Photos and voice notes captured in memory, never in the gallery; photos cropped before they are stored, EXIF and location dropped - Links between entries, backlinks and a graph of links where you link entries by dragging one onto another - Search, search inside an entry, trash with 30-day expiry **Vaults** - Create, change the password, delete a vault (its blocks are overwritten in place) - A one-shot rule: on the next opening of this vault, destroy the vault with password X - Backup of everything, restore, export of one vault under its own password, import with merging **Privacy** - No internet permission, no trackers, no ads - Screenshots blocked unless you allow them; no preview in recent apps - Incognito keyboard, no autofill, copied text cleared after 60 seconds - Locks on screen off, after idle time and in the background The core is written in Rust: Argon2id, XChaCha20-Poly1305 and BLAKE2b; the container is a pile of 4096-byte blocks that all look like random bytes, with random chaff added all the time.

publisher

78ce6faa72264387284e647ba6938995735ec8c7d5c5a65737e55130f026307d

first seen

2026-10-18T05:27:50.338106+00:00

last event

2026-10-25 17:11 UTC

install

zapstore.dev or any Zapstore-compatible client

topics

#note #task #writing

source & build

repository

https://github.com/tetogon/palimpsest

arch flags

android-arm64-v8a android-armeabi-v7a android-x86_64

manifest

missing

releases (kind 30063)

2 releases indexed; latest 0.3.0.

version	channel	released	event
0.3.0	main	2026-10-25 17:11 UTC	5a1adf9e…
0.2.4	main	2026-10-15 13:39 UTC	22606efe…

assets & verification

Every app, release and asset event is schnorr-verified (NIP-01 id + signature) before it enters the catalog, and assets are content-addressed by sha256. We subscribe read-only to the catalog relay — never write to it.

0.3.0 — palimpsest-v0.3.0.apk

sha256

59c7f332391b0058da39ec6d097a105754acf2296b5658e06849f2a86784ceff

size

6.7 MB

archs

android-arm64-v8a, android-armeabi-v7a, android-x86_64

version code

300

apk cert sha256

4e79c9360ba7e8ab2449ad243a0eaa2296bd74d7224412ff8e49e507e4d37b8b

download

palimpsest-v0.3.0.apk

0.2.4 — palimpsest-v0.2.4.apk

sha256

7746f1070fe3b53741c7556396192cd059376e022ae88a9eaa502a1dac9fddf0

size

6.1 MB

archs

android-arm64-v8a, android-armeabi-v7a, android-x86_64

version code

204

apk cert sha256

4e79c9360ba7e8ab2449ad243a0eaa2296bd74d7224412ff8e49e507e4d37b8b

download

palimpsest-v0.2.4.apk

Showing the newest 2 asset descriptors; the full set is in /api/apps/78ce6faa…