Native macOS App

Your notes, encrypted

Every note is sealed with AES-256-GCM before it touches the disk, using a key derived from a password that never leaves your Mac. Set a distress password and one wrong-on-purpose unlock destroys every copy.

Download on the Mac App Store macOS 14+ • €8.99
AES-256-GCM
Touch ID
Zero Knowledge
Shroud
How It Works

Simple on the surface,
serious underneath

1
🔑

Set Your Password

Create a master password on first launch. It never leaves your Mac.

→
2
🔐

Notes Get Encrypted

Every note is protected with AES-256-GCM encryption automatically.

→
3
👆

Unlock with Touch ID

Biometrics work only after you've typed your password once that session. A sleeping Mac is never a way in.

Features

Everything you need,
nothing we can read

🔒

AES-256-GCM, Authenticated

Keys are derived with PBKDF2-SHA256 at 100,000 iterations, then HKDF-SHA256, and held in memory only. GCM is authenticated, so tampering is detected rather than quietly decrypted into garbage.

Password + Salt → PBKDF2 → HKDF-SHA256 → 256-bit Key → AES-GCM
🕳️

Distress Password

Set a second password alongside your master one. Entering it at the lock screen permanently destroys the notes, the local backup and the iCloud copy, then shows the same first-run screen a clean install would. No dialog, no tell, no undo. Off by default.

☁️

Encrypted iCloud Backup

Your encrypted vault is backed up to your own private CloudKit database. Ciphertext only — the password never leaves your Mac, so nobody can open it. Including us.

📦

Portable Vaults

Export a .shroudvault file and open it on another Mac with the same password. Or restore from iCloud on a new machine. Or start clean.

👆

Touch ID

Unlock with biometrics, but only after a password unlock in the same session.

🧨

Auto-Wipe

Optionally erase everything after a number of failed attempts you choose. Progressive lockouts slow guessing down long before it gets there.

📋

Clipboard Auto-Clear

Copied text clears itself after a timeout you set, so a password doesn't linger.

🔐

Auto-Lock

Shroud locks the moment you close the window. Colour tags, pinning, instant search and keyboard-first navigation are waiting when you come back.

Security

Your key never
leaves your Mac

We can't read your notes. We don't want to. The backup that reaches iCloud is ciphertext, and the key that would open it stays on your machine.

Master passwordNever storedOnly a hash is kept
Salt & hashesKeychain, device-onlyNever synced
Encryption keyRAM onlyCleared on logout
NotesLocal fileAES-256-GCM
iCloud backupYour private CloudKit DBCiphertext only

No accounts. No analytics. No servers of ours.

The only network call Shroud makes is to your own private iCloud database, carrying ciphertext. We can't read your notes, reset your password, or recover your vault. Forget your master password and the notes are gone — that's not a limitation, it's the whole point.

Shroud

Ready for
real privacy?

Shroud is available now on the Mac App Store, listed as Shroud Notes. One-time purchase, no subscriptions.

Download on the Mac App Store

Requires macOS 14 Sonoma or later • €8.99