Everything you need to know

Squirrel Notes uses AES-256-GCM encryption with keys derived from your passphrase via PBKDF2 (600,000 iterations). All user-authored content (notes, titles, tags, collection names, attachment filenames) is encrypted client-side before it leaves your browser.

No. Your passphrase never leaves your browser and is never sent to our servers. Even with full database access, we cannot decrypt your notes. This is called zero-knowledge encryption.

Squirrel Notes uses a Data Encryption Key (DEK) to encrypt your content. This DEK is wrapped by a Key Encryption Key (KEK) derived from your passphrase. This means you can change your passphrase without re-encrypting all your notes.

Generate a recovery code from Settings → Security — it is available on every plan. If you forget your passphrase, use the recovery code from the unlock screen to restore access and set a new passphrase. Without a passphrase or recovery code, your notes cannot be recovered.

The PIN encrypts your DEK bytes in localStorage and never leaves your device. It provides convenience without weakening security. Progressive lockout prevents brute force: 3-second delay after 5 failed attempts, 30 seconds after 8, passphrase required after 10.

Public shared notes are re-encrypted with a separate share passphrase you choose (minimum 8 characters). The note content and attachments are encrypted in your browser before upload. The server only stores ciphertext and never sees the passphrase.

Notes open as a rendered document you write in directly, with a Markdown view one switch away. Tabs are replaced by a library panel beside a single open note, and an info panel holds the outline, tasks, tags, files and public link. Your notes are still stored as the markdown you wrote.

Eight built-in templates, including Meeting Notes, Task List, Brain Dump, Daily Journal, Weekly Review, Decision Record and Reading Notes, help you start writing faster.

Smart Search (Alt+Shift+F) supports structured queries: tag:name, collection:name, has:attachment, updatedAfter: / createdAfter: with relative dates (today, -7d, -30d), exact phrase matching in quotes, and autocomplete for tags and collections.

Smart Collections (Pro) are live sidebar collections whose contents update automatically based on a search query. They show up to 25 matching notes and update instantly when you create, edit, or tag notes.

Press Cmd/Ctrl+K to open a searchable command palette. Access actions like pin/unpin, toggle focus mode, switch between Document and Markdown view, rename, move, share, delete, create notes (including from templates), create collections, open Settings, Help, Changelog, or lock the app.

The Model Context Protocol (MCP) server lets AI assistants (Claude Desktop, Cursor, and any MCP-compatible client) read and write your notes using natural language. Available in two modes: STDIO (local) and Lambda (cloud). Includes 20+ tools for notes, collections, tags, shares, and attachments.

Pro users get WebSocket-based real-time sync (~1 second latency). Changes on one device appear on all active sessions almost instantly. Free users get 60-second polling. The channel carries no note content — only encrypted change notifications.

Free includes unlimited notes, encryption, recovery codes, templates, search, tasks, files (20 MB), and all core features. Pro ($2.99/month) adds real-time sync, public sharing, saved searches, Smart Collections, REST API, MCP server, and 500 MB storage.

We accept all major credit cards (Visa, Mastercard, American Express) via Stripe, our secure payment processor.

Yes. You can cancel your Pro subscription at any time from your account settings. Your plan remains active until the end of your billing period.

Your existing files remain accessible, but you won't be able to upload new files if you exceed the free tier storage limit (20 MB). You can download your files before downgrading.

Pro users get API keys to programmatically manage notes, collections, and tags. You can build custom integrations, automate note creation from other tools, or extract data for analysis. Full API documentation is available in your account.

Yes, portions of Squirrel Notes were developed with the assistance of AI coding tools: GitHub Copilot, Claude Code and OpenCode. However, the product is authored and maintained by a senior software engineer with over 20 years of industry experience. All code is reviewed, tested, and validated by a human expert before deployment to ensure quality, security, and reliability.