Every edition.
One serial number.
Qryptic Ultimate will bring every Qryptic edition into one Windows app, unlocked with a serial number that is yours.
In development. Join the list to hear first.
A serial number makes software feel owned.
Ultimate will unlock with your own serial number, on your own PC.
- Serial-number unlockComing
- QOL ID sign-in in the appComing
- Proper Windows installerComing
Every edition, in one app
What is in the app today, and what Ultimate adds as it is built.
In the app today
- AES-256-GCM encryptionToday
- Tamper detectionToday
- Fails closedToday
- Safe upgradesToday
- Fully offlineToday
- Block editorToday
- Tabs and real filesToday
- 26 themesToday
- Read aloudToday
- Repo foldersToday
- Custom theme builderToday
- Code blocks with one-click copyToday
- Sealed secrets notesToday
Coming to Ultimate
- Wipe on lockoutComing
- Symbol Pattern lockComing
- Argon2id key stretchingComing
- Key fileComing
- Multicrypt cascadeComing
- Hardware security keyComing
- PIN clipboard vaultComing
- Line numbersComing
- Syntax highlightingComing
- Encrypted snippet vaultComing
- Secret-aware notesComing
- Repo toolsComing
- Encrypted cloud vaultComing
Being chosen now
Ultimate will come with perks no other edition gets. They are being chosen now, and they will be announced here first.
ComingHow a note is sealed
These are the facts of the app as it is today. Sealing is a choice you make per note. No marketing numbers.
When you seal a note, today
- Cipher
- AES-256-GCM, the default seal
- Key from your passphrase
- PBKDF2-SHA256, 600,000 iterations
- Salt
- 16 random bytes, new on every save
- IV
- 12 random bytes, new on every save
- Tamper check
- 128-bit tag on every AES-256-GCM seal. A wrong passphrase, or any change to the sealed text, is rejected
- No passphrase
- Saving a sealed note stops. It never writes the note in plain text
Stronger locks, coming
Planned as extra layers on top of AES-256-GCM, never as a replacement.
- Argon2id key stretching Coming
Memory-hard key derivation. It makes guessing a weak passphrase on graphics cards far more expensive.
- Key file Coming
Passphrase plus a file, for example on a USB stick. A stolen passphrase alone will not open the note.
- Multicrypt cascade Coming
AES-256-GCM plus XChaCha20-Poly1305: insurance if one cipher is ever broken. It does not help against passphrase guessing.
- Hardware security key Coming
Unlock with a FIDO2 key or Windows Hello. The key never leaves the device.
Honest limits today
- Sealing is opt-in. A new note saves as a plain .txt file, and autosave keeps plain notes plain, until you use Save As with a sealed format and a passphrase.
- File names are not encrypted, so name sealed notes carefully.
- The app has an optional sync setting, off by default. When it is on and you are signed in, it uploads the text of your notes to QOL's servers without encryption, sealed notes included. Leave it off. An encrypted cloud vault is Coming
- Read aloud's natural voices use Microsoft's online speech service, so the text being read goes over the network. The built-in Windows voices stay on your PC.
- The classic ciphers (Caesar, Atbash, Rail Fence, Playfair) can still open old files, labelled not secure. New saves use AES-256-GCM.
- No download yet. Qryptic is not released.
- No installer yet, and the app is not code-signed yet, so Windows may warn you when it first runs.
Every edition has its own home
One app family, separate editions.
Qryptic and Qryptic+
The encrypted notepad today, and a Plus edition with stronger locks, planned.
qryptic.one
Qryptic Code and Code+
Encrypted notes built for code: code blocks, repo notes and secrets.
qryptic.locker
Build your own
Pick the features you want and see which edition covers them.
qryptic.one/build
One account for QOL
QOL ID is QOL's one account. Signing in to Qryptic with it, with purchases and serials attached, is Coming
Hear first about Ultimate.
Leave your email and we will tell you first when Ultimate is ready.