End-to-End Encryption
Your notes, todos, events, saved links and prompts, locked on your device before they are saved. Not even we can read them.
Optional, zero-knowledge encryption for everything you write in Flippy. A passphrase you choose derives a key on your device; content is sealed with AES-256-GCM before it is synced, and the server never sees the passphrase, the recovery code or the key. The exact list of encrypted and readable fields is public, field by field.
What you get
- Notes, todos, calendar events, saved content and AI Lab prompts encrypted before they leave your device
- Images in notes encrypted as files, in a private bucket
- Zero knowledge: your passphrase and recovery code never reach our servers, and we cannot reset them
- Works across all your browsers: unlock once per device, lock with one click
The deep dive
Sync is only worth having if the thing doing the syncing can be trusted with what it carries. With end-to-end encryption on, Flippy's servers carry your notes, tasks, events, links and prompts in a locked form nobody can read, and only your devices hold the key.
There is no 'forgot passphrase' email because there cannot be one: the passphrase is yours alone. A one-time recovery code is your backup. If both are lost, the data is lost too, and that is the point.
We publish exactly what is and is not encrypted, down to the database column, on the My data page. The list is generated from the same code that does the encrypting, so what you read is what runs. Where a field stays readable, the page says why.
Everything in End-to-End Encryption
Pairs well with
Make your next work session count.
Install Flippy in 30 seconds. The next time you sit down to work, your whole suite is already open.