Inkdrop v0.11.0 is out🎉

Hi, beta testers. I recently had a survey and could know a lot of feedback what you think about Inkdrop. Thank you for your suggestions…

Takuya Matsuyama

06 Sep 2016 — 2 min read

Hi, beta testers.
I recently had a survey and could know a lot of feedback what you think about Inkdrop. Thank you for your suggestions! This update is our big step including the following:

New feature: Data at rest encryption
New feature: Image attachments
New feature: Export all
New feature: Support web proxy
Deprecated feature: Encrypt note with password
Deprecated feature: Auto-toggle to preview mode when opened a note

Seamless Security

Data at rest encryption is now supported. As a result of the user survey, it appears that Inkdrop users are often using the app for taking notes not just about programming but also projects and meetings for their business. These notes may include confidential information necessary to be carefully protected.

Since I’m just a single developer and I can’t ensure the highest network security to protect user data like a big company (though many companies are yet compromised by crackers). But there’s a way to protect data with the highest security I can do, that’s data-at-rest encryption.

What’s Data at Rest Encryption

Having data encrypted will make it almost impossible for someone to access or steal a hard disk and get access to the original data. Your whole notes stored on disk in Inkdrop database will be encrypted with a common key which is a 256-bit AES key generated automatically when first you access to the database. We use this key, along with an initialization vector, to encrypt your data in GCM (Galois/Counter Mode). The key is also encrypted while stored on disk, with a 256-bit AES key derived with PBKDF2 from your login password.

NOTE: I never store a copy of this common key without encryption and don’t use any escrow mechanism to recover your encrypted data. This means that if you forget your login password, we cannot recover your data and we can’t even reset your password.

‘Encrypt Note with Password’ is deprecated soon

You could encrypt a note with your password on the client app before. This feature will be deprecated soon because it’s no longer needed. It may still be necessary for a few people but that’s not a scope of Inkdrop. Please don’t forget to decrypt all notes before the deprecation or you will not be able to reveal your note.

Work Better, with Images

Inkdrop eventually supports image attachments. You can drag&drop a file into the editor, then, boom! Your image file is now inserted into your note and synced with other computers. Files are also encrypted with your key so it’s secure.