Notesnook review: end-to-end encrypted notes, tested properly

Filed under Review

By Gerald · 28 August 2026

Rows of steel safe deposit boxes in a bank vault, one open with a key in hand

Short answer: Notesnook is one of the few note apps where end-to-end encryption is real rather than a marketing line, and I used it daily for several weeks to check that claim rather than take it on faith. It is worth using if privacy is a genuine requirement for you, not just a preference. It is a harder sell if you rely on server-side search across a large note library or you want app lock without paying for it, because that moved behind the Pro plan.

I tested the desktop and web apps against the vendor's own encryption documentation, checked the self-hosting path, and read the pricing page directly rather than trusting older reviews. Here is what held up and what did not.

What Notesnook encrypts and when

Notesnook encrypts notes on your device before anything touches its servers. That includes the note body, attachments, and metadata like titles and notebook names. The company cannot read your notes even if compelled to hand over server data, because the data on the server is ciphertext without your key.

This is a real architectural choice, not just a checkbox. Plenty of apps encrypt data in transit (so nobody can intercept it on the wire) and at rest on the server (so a stolen disk is useless), but decrypt it server-side to run search, generate previews, or power a web client. Notesnook does the harder version: the server never sees plaintext, full stop.

The cost of that choice shows up immediately in daily use, and it is worth being honest about before anyone signs up expecting it to work exactly like a normal notes app.

Living with an encrypted notes app

A set of keys resting on a wooden table — Encryption means the key lives with you. Lose it and nobody, including the vendor, can open the door.

Sync feels ordinary once set up. Notes move between devices in a few seconds, and I did not lose data or hit sync conflicts during my test period. The editor is plain and fast: rich text, checklists, basic formatting, nothing that feels like it is fighting the encryption underneath.

Where it stops feeling ordinary is anywhere the app would normally offload work to a server. There is no web-based full-text search across your whole vault the way there is with an unencrypted app, because the server has nothing to search. Notesnook handles this by decrypting and indexing on-device instead. It works, but search speed depends on your device rather than a server cluster, and a very large vault will feel it more than a small one.

Sharing a note publicly, or sending a read-only link to someone without an account, is also a smaller feature set than in tools that never encrypted the content in the first place. You can share, but the workflow has more steps than "generate a link and send it." The app has to produce something that can be decrypted by the recipient without exposing your master key.

Search, sharing, and the things encryption makes harder

None of this is a bug. It is the direct cost of the encryption model, and any honest review has to say so instead of pretending encrypted apps get search and sharing for free.

If your notes are mostly personal, private, and read by nobody but you, none of this matters much. If you regularly publish notes or collaborate live with other people, the friction is real. Expect it to show up within the first month, especially if you also clip large amounts of web content into your vault and want instant cross-device search over all of it.

The free plan and what the paid tier adds

I checked the pricing page directly in July 2026 rather than repeating older reviews, because Notesnook's plans changed and some of what circulates online is stale. The free plan currently includes 50MB of monthly upload storage, a 10MB file size limit, up to 50 notebooks and 50 tags, and 10 active reminders. It also includes full end-to-end encryption with unlimited notes and offline access. That last part is the headline: the encryption itself is not gated behind a paywall, and every plan, including free, gets it.

App lock, which adds a password or biometric gate on top of encryption when opening the app itself, is not in the free tier. It starts at the Essential plan. Pro adds 10GB of monthly storage and a 1GB file size cap, and Believer goes further still on storage. This is the one place where Notesnook's marketing and its current product do not fully line up: the free-tier pitch leans hard on "free end-to-end encryption," which is true, but app lock feels like the kind of security feature people assume comes with that pitch, and it does not anymore.

I do not think this is dishonest. Encryption and app lock protect against different things (server compromise versus someone picking up your unlocked phone), and it is reasonable for a company to charge for one and not the other. But if app lock is why you are looking at Notesnook, check the current plan page before you commit to the free tier expecting it.

Self-hosting the sync server

Notesnook's sync server is open source, licensed under AGPLv3, and self-hostable via Docker. This matters if you want the encryption story to also come with an ownership story: your notes never leaving your own infrastructure, not even in encrypted form.

Self-hosting is real but unpolished. The official position, as of my testing, is that it works and the code is public, but documentation is thinner than for the hosted service and support is limited. If you are comfortable running a Docker container and reading a README rather than a full setup guide, it is workable. If you want a turnkey self-hosted deployment with the same support level as the paid hosted plan, expect to do more of the legwork yourself.

Notesnook makes encryption the default and charges you for convenience on top of it. That is the right way around, even when the convenience pricing stings.

Who should use it and who is over-buying

Notesnook is a strong choice if you handle genuinely sensitive material (legal notes, medical records, financial planning, anything you would not want exposed in a breach) and you are willing to accept slower search and more deliberate sharing as the price of real encryption. It is also a good fit if you specifically want to self-host the sync layer and are comfortable with Docker.

It is probably more than you need if your notes are mostly grocery lists, project ideas, and meeting notes that would be mildly annoying rather than damaging if exposed. Plenty of people buy into an encrypted note app because encryption sounds responsible, then never touch the features that make the encryption worth the cost. If that is you, a simpler app with an in-app lock screen and normal server-side sync will serve you just as well with less friction.

Flow does not encrypt notes end-to-end. It marks a note confidential instead, which hides its body from every preview surface, including the MCP connector used by AI tools, while keeping normal server-side search and sharing intact. That is a real limitation next to what Notesnook does: a server compromise at Flow could in theory expose a confidential note's content, which cannot happen with Notesnook's model. If the requirement is specifically "nobody but me can ever read this, even under compulsion," Notesnook is the correct tool and Flow is not it.

Frequently asked questions

Is Notesnook really end-to-end encrypted? Yes. Notes, attachments, and metadata are encrypted on your device before syncing, and the server only ever stores ciphertext. This applies on every plan, including free, not just paid tiers.

What happens if I forget my Notesnook password? Because Notesnook cannot decrypt your data, losing your password without a working recovery method means losing access to your notes. Set up and store the account recovery key the app provides during signup, since there is no "reset password and keep your data" path the way there is with unencrypted services.

Is Notesnook free? The core product, including full end-to-end encryption and unlimited notes, is free. The free plan has limits on storage (50MB per month), file size (10MB), notebooks, and tags, and does not include app lock, which requires at least the Essential paid plan.

Can I self-host Notesnook sync? Yes. The sync server is open source under AGPLv3 and can be run via Docker. Documentation and support for self-hosting are thinner than for the hosted service, so expect to do more of the setup yourself.

How does Notesnook compare with Standard Notes? Both are end-to-end encrypted, open source note apps with a free tier and a paid tier for extras. Standard Notes has been around longer and leans harder on stability and a minimal feature set. Notesnook's editor and organization features (notebooks, tags, reminders) are somewhat richer. Read my Standard Notes review for the full comparison.

My verdict

Notesnook does the hard version of encryption honestly, and the free tier still gets you real end-to-end protection, not a watered-down preview of it. Just go in knowing app lock costs extra now, search is slower by design, and sharing takes a few more steps than you are used to.