3 ms·
Safe Notes: Encrypted, Private note manager
- jqpabc123 4y agoStores the encryption passphrase locally. This is a hard fail from a security standpoint. Extra bad for an open source app where anyone can easily find out where/how the passphrase is stored by just looking at the code. It should ask for the passphrase at startup (which it does already) but just don't store it anywhere except volatile memory. The only meaningful test of the provided passphrase should be if the notes can be decrypted properly using it. If not, the notes are gibberish. This way, it is impossible for anyone to obtain the passphrase to decrypt your notes even if they have your phone.