/note256

Here's the story. As developers, we've constantly been working with some kind of credential data mess: host configurations, deployment options, backup copies of certificate keys, & so on. Then, we need it all to be privately available online - to share with colleagues, client tech admins or those freelance guys.

What is the way all this data is being stored in a real-world process, 95% of cases? Sad but true, I tell you: something in a plain text file on a host; [or] inside dropbox/gdocs shared doc; [or] even buried into an email archive ("I had sent you the SSH pass few months ago"). This can not be considered a secure approach by any means.

And what is «secure» in our cloud-era? It should mean that no authorized third party can physically access your data, even the storage host itself. We've seen stories where a bad guy or a malware code gained root access to servers and was able to bypass the «outside» security measures - because, you know, it's a root. Data can be considered secure if it's accessible on authenticated client premise ONLY - which means, an industry-grade client security endpoint has to be implemented in your browser. So we did it.

Why you'll need this tool?

Features

• convenient and usable low-distraction UI. Perfectly suited for configs and raw material.
• AES-256 (=years of decoding) for everything. MD5 hashes for content markers. No exceptions.
• everything works inside a browser, no installation, on almost any device (do these smart watches already have web broswer?)
• precise document-applied encryption. You can define a password for every piece of content.
• a workspace. Security measures are no option to leave comfort behind.
• Unicode and I18N friendly. 虎穴に入らずんば虎子を得ず。
• all docs have a shared «panel side» which can be optionally encrypted separately
• documents have inner structure, easily modified via project list
• you may have as many separate secure document spaces as you wish, just change the project access key on the fly

Start using it

Just in case you missed the magic button:

We had added PWAT because we basically want to get new users and some buzz at this point. The service now features no ads at all, no hidden/paid features, everything is accessible right now «as is» for everyone, so a small tweet looks fair.