End-to-end encryption
Everything is encrypted with AES-256 on your device. Your master password never leaves it.
End-to-end encrypted · 5 platforms
Your notes and passwords, kept mum.
Mumpad encrypts your notes and passwords on your device, then syncs them across iPhone, Android, Mac, Windows and Linux. Not even our server can read what you write.
- iPhone
- Android
- Mac
- Windows
- Linux
“Keep mum” means say nothing. That is exactly what Mumpad does: it never tells anyone what you wrote.
Features
As simple as a notebook, as safe as a vault.
Notes, to-dos and passwords in one app. Each with the same calm design, on every device.
iCloud and Google passwords
Import exports from Apple Passwords and Google Password Manager; duplicates are skipped automatically.
Fingerprint and Face ID
Every password asks for biometrics, or a 6-digit PIN if your device has none. It cannot be turned off.
Sync everywhere
iPhone, Android, Mac, Windows and Linux. Write offline; changes merge on their own when you reconnect.
No edit gets lost
Edit the same note on two devices at once and both versions are kept. You decide.
Fast and calm
Command palette, focus mode, to-dos, notebooks, tags and one-time codes.
Security
You hold the key. Our server holds only gibberish.
- Your master password never leaves your device. Two separate keys are derived from it: one to sign in, one to encrypt. The encryption key cannot be recovered from the sign-in key.
- Every note is encrypted on your device. Titles, content, tags, passwords and URLs are encrypted with AES-256-GCM. The server cannot even swap one note for another.
- Passwords have an extra lock. Showing or copying a password asks for your fingerprint or Face ID every time, or a 6-digit PIN if your device has neither. Copied passwords are cleared from the clipboard after 30 seconds.
If you forget your master password, we cannot recover your data either. That is not a gap; it is a promise.
You seeDesign review
We compared the mobile and desktop layouts side by side. The decisions go into the next release.
Server sees
v1.sLGys7S1tre4ubq74ncuwpih3n192trHvzXpoOUeZfB3QetMfPSgNezumTZrJFcagUI1mtjsWwWo2g4l2BOwuUo28wYVImport
Your iCloud and Google passwords, in two minutes.
Apple and Google do not let apps read your passwords directly, but both let you export them. Mumpad reads those files, skips what you already have and flags differences for you to review.
1
Apple Passwords
On your Mac: Passwords app › File › Export All Passwords.
2
Google Password Manager
passwords.google.com › Settings › Export passwords.
3
Bring them to Mumpad
Passwords › Import. When it is done, Mumpad reminds you to delete the plain-text CSV file.
PlatformsInstall steps and all options →
The same notebook on every device.
What you write on one device is ready on the others within seconds.
iPhone and iPadOpen in the App Store
AndroidOpen in Google Play
WindowsOpen in the Microsoft Store
Browser extensionOpen in the Chrome Web Store
FAQ
Frequently asked questions
What happens if I forget my master password?
Your data can only be opened with your master password. Nobody, including us, can reset it, so we recommend writing it down somewhere safe when you sign up.
Can I use it without an account?
Yes. Without an account everything stays on that device only, still encrypted. You can create an account and start syncing at any time.
Where is my data stored?
On your device and, for sync, on our server; encrypted in both places. Apart from your email address and encrypted blobs, the server keeps nothing.
Does it stay in sync with my Apple and Google passwords?
No. Apple and Google do not allow direct access to passwords, so Mumpad imports the exported file once. After that your passwords live in Mumpad.
Is it paid?
We will announce pricing closer to launch.