Myne is a notes app that encrypts on your device before anything leaves it. The server stores ciphertext. Your account is a number you generate, not an email we keep.
No new crypto. No proprietary protocol. Argon2id, XChaCha20-Poly1305, BIP-39 — well-studied primitives, composed plainly.
Argon2id stretches your master password and 24-word recovery phrase into independent wrap keys. Each unwraps a copy of your random root key. The server never sees any of them.
kdf = Argon2id v1.3 m = 256 MiB t = 3 p = 2
Each note is sealed with XChaCha20-Poly1305 plus a CTX commitment. The server stores opaque ciphertext blobs.
aead = XChaCha20-Poly1305 commit = CTX subkey = HKDF-SHA-256 nonce = 24 bytes random
You sign up by generating a 20-character Crockford-base32 account number. We store its hash. There is no email field.
id = MY‑XXXX‑XXXX‑XXXX‑XXXX‑X encoding = Crockford-base32 id-hash = SHA-256(account_no)[:32]
No email field, no phone field, no recovery question. Signup gives you an account number — yours to write down, store offline, or hand to a password manager.
The server keeps only its hash. We can't reset it, sell it, or mail you about it. There is nothing to mail.
0/O ambiguityMY Fixed prefix — distinguishes Myne account numbers from arbitrary base32. 1–4 First entropy group. Non-breaking hyphens (U+2011) — never wraps mid-group. 20 Damm-32 check character. Single-typo detection, single-adjacent-transposition detection. · Demo — fresh CSPRNG draw on every click. Production includes the spec §4 Damm-32 check. A BIP-39 24-word phrase is generated once, on-device, when you create your vault. Either your password or the phrase unwraps your root key — the phrase is an independent credential, not a second factor.
If you lose both your password and recovery phrase, your notes are unrecoverable. We cannot help. We say this in the product, before you click "create vault" — and we mean it.
Sample words from the BIP-39 English wordlist — not a real phrase.
A privacy product is defined by its no's. These are not on the roadmap. They will not appear later.
Every primitive is well-studied and standard. The protocol is documented and versioned. The client is open source.
Tauri 2 app with single-vault editor, wikilinks, backlinks, and a minimal graph view. Local-only until Phase 2 lands.
Same protocol, same trust boundary for self-hosted and hosted. Hosted sync is the only paid tier; the local app stays free.
iOS and Android clients sharing the protocol library. Same crypto, same account number, same vault format.
Multi-cursor co-editing via CRDT (Yjs). Lands only after the rest of the product is solid — earliest, not soonest.
We post on the ledger when there's a meaningful change to the threat model, protocol, or spec. No cadence promise — read when you want.
Show updates