Two-factor authentication
A temporary TOTP code protects sign-in, on every plan.
Who can read your notes?
What Notance protects, what it keeps, and the standards behind it.
End-to-end encryption
Your notes are encrypted on your device before sync. Notance does not hold your decryption key in clear text: this is the principle of a zero-knowledge architecture.
AES-256-GCM
Encrypts your data, with built-in integrity checking.
Argon2id
Turns your password into a strong key, without ever sending it to the server.
Per-note lock
A 4 to 8 digit code controls access to the notes you choose on this device, on top of your account’s encryption.
Recovery key
Given at sign-up, it lets you recover your notes if you forget your password.
Recovery keyAfter a password reset, this key lets you read your notes again if recovery has been set up.
It does not replace signing in or two-factor authentication.
Your notes in France, encrypted before they get there.
Your notes are encrypted on your device, then stored in France.
Where your notes are storedFrance
Questions about security?
The documentation details the architecture, key derivation, and known limits.