# NoteBook | An App You Can Trust Your Secrets With

**URL:** <https://onehack.st/t/notebook-an-app-you-can-trust-your-secrets-with/95269>\
**Category:** Tools & Scripts\
**Tags:** tools, data-recovery, hosting\
**Created:** [July 5, 2020, 8:26am UTC](https://onehack.st/t/notebook-an-app-you-can-trust-your-secrets-with/95269 "2020-07-05T08:26:49Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![BlueHacker](https://onehack.st/user_avatar/onehack.st/bluehacker/32/174721_2.png) [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Post date:** [July 5, 2020, 8:26am UTC](https://onehack.st/t/notebook-an-app-you-can-trust-your-secrets-with/95269/1 "2020-07-05T08:26:49Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/6/9/69bfbe1cea49c37b7bb20b1321ca76f3dc95073d.png)

# Notebook

An app you can trust your secrets with.  
Try it out: [https://securenotebook.pythonanywhere.com/](https://securenotebook.pythonanywhere.com/)  
This app uses AES-128 GCM to prevent anyone but you from accessing your notes.

## How does work?

### Register

1. Generates a 16-bytes **(128-bits)** AES key
2. Derives a master key from your password
3. Encrypts AES key using master key
4. Hashes your password
5. Saves hashed password to database
6. Saves encrypted AES key to database

### Login

1. Derives a master key from your password
2. Saves master key into your browser’s session

### Encrypt data

1. Gets your master key from your session
2. Uses your master key to decrypt your AES key
3. Uses your decrypted AES key to encrypt your data

### Decrypt data

1. Gets your master key from your session
2. Uses your master key to decrypt your AES key
3. Uses your decrypted AES key to decrypt your data

### Notice:

**Your master key is only derivable from your plain-text password**  
**Your plain-text is only available when you are logging in**  
**Your master key is never saved into a database**  
**Your decrypted AES key is never saved**

### Warning:

**If you lost your password, then your notes will be lost as well**

# Usage

### Installation

$ \> pip install -r requirements.txt

### Start

$ \> python notebook.py

### Navigate to the following URL within your browser

```auto
http://localhost:5000

```

## GitHub:

> **[GitHub - Bitwise-01/Notebook: An encrypted notebook](https://github.com/Bitwise-01/Notebook)**
>
> An encrypted notebook

---

<div class="post-metadata">

**Author:** ![quick-learner](https://onehack.st/user_avatar/onehack.st/quick-learner/32/43997_2.png) [@quick-learner](https://onehack.st/u/quick-learner)\
**Post date:** [July 8, 2020, 8:23am UTC](https://onehack.st/t/notebook-an-app-you-can-trust-your-secrets-with/95269/2 "2020-07-08T08:23:00Z")

</div>

how to increase its session time ? or remove it?  
i want it to logged in for more time