Blog ·September 6, 2026 ·Cloudmanic Labs
Should you encrypt your notes? The honest trade-offs
Every encrypted-notes app sells you the same picture: a padlock, a promise that not even they can read your stuff, and a subtle suggestion that anyone not encrypting everything is careless.
Nobody sends you the bill.
Here it is. A note your app genuinely can’t read is a note it can’t search, can’t OCR, and can’t hand to your AI assistant. That isn’t a limitation somebody forgot to fix. It’s arithmetic, and it applies to every app that does encryption properly — ours included.
So the useful question isn’t “should I encrypt my notes.” It’s which notes, and what you’re paying for each one.
Last checked: September 6, 2026. Every vendor claim below was read on the vendor’s own site that day, and each one is linked.
What encryption actually costs you
When encryption is done properly — the kind usually called zero-knowledge — your device scrambles the note before it leaves, and the company’s servers only ever hold the scrambled version. They hold nothing that can unscramble it.
That’s a genuinely strong promise. It’s also why three things stop working.
Full-text search goes. A search index is built from readable text. There isn’t any. Most apps fall back to searching titles, which are often stored unencrypted precisely so that something still works.
OCR goes. If you scan receipts, photograph whiteboards, or save PDFs, the text inside those images is normally extracted so you can search it. That extraction runs on a server looking at your file. Encrypt the note and there’s no file to look at — OCR simply doesn’t happen.
Connected access goes. Anything you’ve authorized — an AI assistant over MCP, a browser extension, a script using an API token — gets scrambled characters or a polite refusal. That’s not a policy the vendor is choosing to honor. There’s nothing readable to hand over.
Some apps add a fourth cost that catches people out: the note’s version history. If old versions were stored readable and the note is now encrypted, those old versions are readable copies sitting behind a padlock, which makes the padlock decoration. Apps resolve that by deleting them.
Apple says it out loud, which is more than most
The clearest confirmation that this trade is universal doesn’t come from a privacy startup. It comes from Apple’s own support documentation for Notes on the Mac:
If you’ve locked a note, only the title is searched, even if your locked notes are unlocked.
Read that second clause again. Even unlocked, a locked note is only searched by title. Apple isn’t being lazy. The searchable index for that note was never built, because at the moment indexing happens the content isn’t readable.
Every honest app lands in the same place. Most just don’t put it in the marketing.
Where the encryption happens changes what it costs
Not all encrypted notes apps pay the same price, and the reason is architectural rather than moral.
If your device holds the whole library, encryption mostly protects the copy on someone else’s server. Your app can still read everything locally, so local search keeps working. Joplin works this way: its end-to-end encryption is applied when data goes to the sync target, and the docs are upfront that “there is a small overhead to using E2EE since data constantly has to be encrypted and decrypted.” The cost is that you need the whole library on the device.
If the heavy lifting happens on a server — full-text search across thousands of notes, OCR on scanned documents, an AI assistant reaching into your library — encryption removes the server’s ability to do it. You get the privacy. The features go.
And if a note isn’t really encrypted from the vendor at all, everything works and the vendor can read it. That’s most mainstream notes apps, and for most notes it’s a perfectly reasonable deal. It’s just not the deal being advertised.
There’s no configuration that gives you all three. Anyone telling you otherwise is either confused or selling.
Who encrypts what, as of September 2026
Six apps, all checked on the vendor’s own site the day this was written. We make one of them, and Harbor sits in this table on the same terms as everyone else.
| App | What gets encrypted | On by default? |
|---|---|---|
| Notesnook | Everything, before it leaves the device | Yes |
| Standard Notes | Notes and files, end-to-end | Yes |
| Joplin | Everything synced, once enabled | No — enable it by hand, on one device first |
| Harbor | Any note or notebook you choose | No — per note or notebook |
| Apple Notes | Individual notes you lock | No — per note |
| Evernote | Selected text inside a note | No — and never the whole note |
A few things worth pulling out of that table.
Notesnook is the strongest default here, and says so plainly: “Everything is encrypted on your device with XChaCha20-Poly1305 and Argon2 before it ever leaves it — which also means nobody at Notesnook can read your notes, or recover them for you.” That last clause is the honest half most competitors leave off. Credit where it’s due.
Joplin’s approach is the most misunderstood. It’s genuinely end-to-end, but it has to be switched on manually and synced out from a single device first. Plenty of people believe they’re covered and aren’t.
Evernote’s is the weakest, and it’s worth being precise rather than snide about why. Evernote’s own page says it flatly: “Evernote allows encryption for selected text within a note, but it does not offer encryption for the entire note.” So the title, the rest of the body, and every attachment stay readable to Evernote. The same page confirms the search cost without flinching — “Encrypted text cannot be searched within Evernote’s platform” — which is the honest sentence we wish more competitors printed.
So what should you actually encrypt?
The practical answer is a short list, not a switch.
Encrypt things where a leak causes concrete harm: account recovery codes, passport and license scans, financial account details, medical records, anything involving someone else’s private information, notes about a legal matter.
Don’t encrypt the working library. Meeting notes, recipes, project plans, article clippings, the photo of the parking level you’re on — this is the material search exists for, and encrypting it buys nothing you’d notice while costing something you’d notice daily.
Think twice about scanned documents specifically. They’re the most tempting category to encrypt and the most expensive one, because a scan you can’t OCR is a photograph you’ll never find again. A box of unsearchable receipts is a box of unsearchable receipts whether it’s encrypted or in your attic.
Decide before you file, not after. In most apps, moving a note in or out of encryption is a one-way door for its edit history.
What we do, and what it costs in Harbor
Harbor’s encryption is optional and off by default. You turn it on for a note, or set a notebook so notes filed there are sealed on the way in. Keys are derived on your device with Argon2id, the note is encrypted with AES-256-GCM, and our servers only ever store the sealed result. There’s no master key and no support override — if you lose the passphrase, we can’t recover it, and that’s the point rather than a gap.
The bill, stated plainly on our own encryption page and worth repeating here: an encrypted note isn’t OCR’d, doesn’t appear in search, and is invisible to your AI, CLI and MCP server. Changing a note’s encryption also deletes that note’s version history, in both directions, permanently.
We picked optional-by-default deliberately. Making everything encrypted would let us run a better ad and would quietly delete the feature most people actually use every day. We’d rather you encrypt the ten notes that matter and keep the other four thousand searchable.
That’s a position, not a neutral observation — we’re a vendor here too, and other apps made the opposite call for defensible reasons. If you want everything sealed with no decisions to make, Notesnook and Standard Notes do that well and we’d point you at them.
The passphrase problem is bigger than people think
Here’s the part that doesn’t fit on a landing page.
Day to day you’ll unlock with Touch ID or Face ID. You’ll type the actual passphrase maybe twice a year. That’s exactly how a passphrase disappears — not dramatically, just quietly, until the day you need it and it isn’t there.
Zero-knowledge means nobody can help you. No reset email, no support ticket, no exception for a nice person with a good reason. A door the company could open for you is a door a subpoena or a rogue employee could open too.
So the day you turn encryption on, put the passphrase in a password manager. Not a note in the same app. That’s the whole ritual, and skipping it is a more likely way to lose those notes than any attacker.
The one-line version
Encryption is a lock, and locks are for the things worth locking.
Encrypt what would hurt. Leave the rest where you can find it.
Harbor is a notes app made by Cloudmanic Labs, who’ve been building software for over twenty years. Encryption is optional, OCR and search are included on every plan, and you can read how we compare to Evernote or see the alternatives we tested.