← back to apps

Nooto

com.nooto.app

android AGPL-3.0-or-later kind 32267

Cross-platform, privacy-focused notes with end-to-end encryption

latest release
client-v0.2.5 main
released 2026-10-14 14:07 UTC

Release indexed without asset descriptors yet.

screenshotscreenshot

about

description
Nooto is a note-taking app that keeps your notes private. Everything is encrypted on your device before it ever leaves it, using AES-256-GCM encryption with keys derived locally via Argon2id. Nobody but you, not even the server operator, can read your notes. **Features:** - Notes are encrypted on-device before sync; the server only ever sees ciphertext - Works fully offline, no account required to use the app locally - Optional sync across devices, using the built-in public server or your own self-hosted instance - Folders, drag-and-drop organization, and a markdown editor - Fully open source and auditable **What the server stores:** only an opaque note ID and ciphertext blobs for content and metadata. No readable title, no readable content, no plaintext of any kind. **Please note:** Nooto is beta software and still under active development. The encryption design has not yet been reviewed by an independent security auditor. Use at your own discretion, and please report issues on the project's GitHub page.
publisher
78ce6faa72264387284e647ba6938995735ec8c7d5c5a65737e55130f026307d
first seen
2026-10-18T03:45:19.049216+00:00
last event
2026-10-14 14:07 UTC
install
zapstore.dev or any Zapstore-compatible client
topics
#note

source & build

repository
https://github.com/clempera/nooto
arch flags
android-arm64-v8a
manifest
missing

releases (kind 30063)

1 release indexed; latest client-v0.2.5.

versionchannelreleasedevent
client-v0.2.5 main 2026-10-14 14:07 UTC 45a5e94d…

assets & verification

Every app, release and asset event is schnorr-verified (NIP-01 id + signature) before it enters the catalog, and assets are content-addressed by sha256. We subscribe read-only to the catalog relay — never write to it.

Showing the newest 0 asset descriptors; the full set is in /api/apps/78ce6faa…