Sealed by Design
Client-side encryption. Zero-knowledge st
Private Notes · API Keys · Seed Phrases · Sovereign Data
Not privacy as a feature. Privacy as the default.
← Drag to compare →
⚠ Notes, passwords, and keys stored in plaintext are readable by any server admin or in a database breach
✓ Notes, passwords, and keys encrypted client-side. Only your wallet can decrypt.
Applications
AppPrivate Notes · API Keys · Seed Phrases · Sovereign Data - everything you keep is sealed in your browser before it ever leaves your device.
Client-Side Encryption
In-BrowserAll encryption and decryption happen in your browser using AES-256-GCM. Plaintext never leaves your device - not to our servers, not to your network, not to anyone.
Wallet-Derived Keys
Your WalletYour encryption key is derived from a single signature by your Solana wallet. No password to remember, nothing stored on a server, nothing that can be phished or leaked.
Zero-Knowledge Storage
Your WalletOur database stores only ciphertext, scoped to your wallet by row-level security. It holds your data without ever being able to decrypt or read it.
Storage Layer
Your WalletSolana anchors identity: your wallet is the only key to your vault. Connect, sign once, and unlock - no password, no email, no account.
THE FLOW
Encrypt
You encrypt everything client-side. Only ciphertext is uploaded - no plaintext ever touches our servers.
Derive Key
Your key is derived from a one-time wallet signature. It never leaves your device or reaches our servers.
Store
Only ciphertext is uploaded to our database, tied to your wallet by row-level security. The server never sees a single byte of plaintext.
Decrypt
Reconnect your wallet and sign once. Your key is re-derived locally and the vault decrypts instantly - only ever on your device.
Encrypted Notes
Private notes, journals, and documents sealed with AES-256 the moment you type them. Only your wallet can open them - not us, not anyone.
Learn morePassword Vault
Logins and passwords stored as ciphertext. No master password to phish, no plaintext on any server - your Solana wallet is the key.
Learn moreKeys & Seed Phrases
API keys, seed phrases, and recovery codes encrypted client-side. Subpoenas, breaches, and rogue insiders see nothing usable.
Learn more
Private Notes
Notes and journals are the most immediate use case. You write freely, and every entry is encrypted on your device before it is ever stored - nobody but you can read a single word, and there is no company that can mine, sell, or surrender your thoughts.
- Private payments & encrypted balances
- Personal password & key storage
- Shareable only by you, never by us
API Keys
Developer secrets belong in ciphertext, not in plaintext config files or sticky notes. Store API keys, OAuth tokens, and webhook secrets encrypted per entry - decrypted locally only when you copy them, never exposed to our servers.
- Developer API keys & access tokens
- OAuth secrets & webhook signing keys
- Privacy-preserving analytics & enterprise compute
Encrypted Storage
Any high-stakes dataset stays encrypted on-device before it ever touches a server. Documents, research data, files, configs, recovery codes - all wrapped under AES-256-GCM with a master key only the user holds. Noctis stores ciphertext; subpoenas, breaches, and rogue insiders see nothing usable. Three MCP tools (`data_store`, `data_fetch`, `data_list`) make the primitive callable from any AI agent.
- Confidential documents & business records
- Encrypted research datasets and confidential records
- Secure file vaults for journalists, legal, healthcare
- Agent-native storage via MCP - Claude Code, Cursor, Continue
Sovereign Data
Your data belongs to you alone. Every entry is owned by your Solana wallet through cryptographic identity - no email, no account, and no company that can lock you out, mine your data, or hand it to a third party.
- Wallet-owned, not account-owned
- No email, no password, no lock-in
- Export your ciphertext at any time
Two promises no cloud notes app can make - because they can read your data. Noctis can't.
Store your most sensitive data - without ever handing us the key to read it.
Your private data shouldn't have to choose between 'safe but stuck on one device' and 'synced but readable by some company.' Noctis gives you both - encrypted on your device, synced as ciphertext, readable only by you.
- Notes, passwords, keys, and files are encrypted the moment you save them - raw plaintext never leaves your control.
- Private notes, password and key storage, and confidential file vaults - all sealed locally with AES-256 before anything is ever uploaded.
- True ownership of your data - your wallet is the only key, you can export ciphertext anytime, and plaintext is never exposed.
Let your AI tools read and write secrets - sealed as ciphertext they can never expose.
Hardcoded keys in config files and chat logs are a breach waiting to happen. Noctis exposes three MCP tools - data_store, data_fetch, data_list - so agents like Claude Code and Cursor pull a secret only when needed, decrypt it locally, and never leave plaintext lying around.
- Agents fetch API keys and tokens on demand - decrypted locally, never written to disk in plaintext.
- Secrets stay encrypted end-to-end; the MCP server only ever moves ciphertext between your vault and your tools.
- Works with Claude Code, Cursor, and Continue - any MCP-compatible client can use your vault.
Powering Privacy on So
Your Solana wallet is t
COMPARISON
| Feature | NoctisAES-256 | Cloud NotesNotion, Evernote | Password Mgrs1Password, Bitwarden | MPCBrowser Storage | TEElocalStorage |
|---|---|---|---|---|---|
| Client-Side Encryption | |||||
| Zero-Knowledge Server | |||||
| No Master Password | |||||
| Wallet-Based Login | |||||
| Composable | |||||
| Breach-Proof |
Scroll to compare →
Noctis is the private vault layer for that future.
Your data, encrypted before it ever leaves your hands.
Frequently Asked Qu
Everything you ne