how BitCrypt handles your password and data security

bitcrypt is designed with privacy and security in mind. here's how we handle your password and data:

password handling

• no password storage on server:
  • your password is never sent to or stored on our server.
  • only a hashed version (using sha-256) of your password is transmitted to the server for verification. this hash cannot be reversed to retrieve your original password.
• client-side encryption:
  • your password is temporarily stored in your browser's memory during an active session. it is erased when you click the end session button or close the browser tab.
• session security:
  • the password is kept in memory on your computer only as long as your session is active.
  • ending the session manually or closing the tab immediately removes the password from memory, ensuring it is not stored anywhere.

data encryption and storage

• encryption on your device:
  • all notebook data is encrypted on your device before being saved to our server. this is done using the aes256 (advanced encryption standard) algorithm with your password as the encryption key.
  • without your password, the encrypted data cannot be decrypted.
• data transmission:
  • the encrypted data and the hashed version of your password are sent to the server for storage. the server does not have the ability to decrypt your data, as it does not store your password.
• local backup:
  • you can save a local copy of your encrypted notebooks at any time using the download button. this ensures you have full control over your data, even if the service becomes unavailable.

accessing your data

• re-login requirement:
  • to access your data, you need to re-enter your password. this ensures that only you, the password holder, can decrypt your content.
• data integrity:
  • if you forget your password, your data will be inaccessible, as we cannot retrieve or reset your password. this is a deliberate security measure to protect your privacy.

why this matters

• complete data ownership: you are the sole owner of your data and password. without your password, no one (not even bitcrypt) can access your notebooks.
• session-based security: passwords are never stored persistently on any device or server, reducing the risk of unauthorized access.

we prioritize your privacy and security, giving you the tools to manage and protect your own data. if you have any questions, feel free to contact us!