Skip to content

Nooto

GitHub clempera/nooto

Install Nooto

Download Zapstore

Download
QR code for zapstore.dev/download
  • Scan the code with your phone’s camera
  • Tap Download anyway if the browser warns about the file
  • Allow your browser to install unknown apps if Android asks
  • Open Zapstore and finish the onboarding

Open Nooto in Zapstore

Open
QR code to open Nooto in Zapstore
  • Scan the code to open Nooto in Zapstore, or search for it there
  • Tap Install, and Download if Zapstore asks you to confirm the developer
  • Confirm in Android’s install dialog. Allow Zapstore to install unknown apps if Android asks

Unclaimed app

The catalog lists Nooto from GitHub clempera/nooto and signs its releases. The developer has not claimed it. The file is still checked before you install it.

Are you the developer? Cryptographically prove you hold the key that signs it.

How trust works

Note-taking app that keeps your notes private. Everything is encrypted on your device before it ever leaves it, using AES-256-GCM encryption with keys derived locally via Argon2id. Nobody but you, not even the server operator, can read your notes.

Nooto is a note-taking app that keeps your notes private. Everything is encrypted on your device before it ever leaves it, using AES-256-GCM encryption with keys derived locally via Argon2id. Nobody but you, not even the server operator, can read your notes.

Features:

  • Notes are encrypted on-device before sync; the server only ever sees ciphertext

  • Works fully offline, no account required to use the app locally

  • Optional sync across devices, using the built-in public server or your own self-hosted instance

  • Folders, drag-and-drop organization, and a markdown editor

  • Fully open source and auditable

What the server stores: only an opaque note ID and ciphertext blobs for content and metadata. No readable title, no readable content, no plaintext of any kind.

Please note: Nooto is beta software and still under active development. The encryption design has not yet been reviewed by an independent security auditor. Use at your own discretion, and please report issues on the project's GitHub page.

Summary generated by Zapstore from source.

Original description, as the developer published it.

Zap Nooto

Zapping anonymously. Sign in to zap with your identity.

No developer has verified this app yet, so sats go to npub1gnwq4…thdn3y, the catalog that brought it to you.

Amount in sats

Latest release

Oct 14, 2026

Unclaimed app No Google servicesSource available · AGPL-3.0-or-later

The catalog lists this app from GitHub clempera/nooto and signs its releases. The developer has not claimed it. Are you the developer? Claim your app

It asks for no sensitive access.

Release notes

Fix insets on earlier webview (android)

Comments

Loading comments…

See more

Get Nooto the private way

Updates checked on your device, and every release verified before it installs.

Get Zapstore for Android

  1. Tap Download APK below.Scan the code with your Android phone’s camera.
  2. If Android asks, allow your browser to install unknown apps.
  3. Open Zapstore and finish the onboarding.
Download APK

v2.0.4 · 71.2 MB · Android 10+

Verify the download

On a computer, run shasum -a 256 <the file you downloaded>. It should print: b13e01319fecf0b3ba1fd60132758bd0fa08a235836c52d44fddb412cf1b7137

If you have zsp, Zapstore’s publishing tool, zsp utils extract-apk <the file you downloaded> works too. Its hash should be the same SHA-256: b13e01319fecf0b3ba1fd60132758bd0fa08a235836c52d44fddb412cf1b7137

On the phone, AppVerifier should show this signing certificate: 99e33b0c2d07e75fcd9df7e40e886646ff667e3aa6648e1a1160b036cf2b9320

Source code All releases and notes

Get zsp

  1. Download the file for your computer.
  2. Make it executable and put it on your PATH.
  3. In your project folder, run zsp.

Have Go? This does the same:

go install github.com/zapstore/zsp/v2/cmd/zsp@latest
macOS, Apple silicon Linux, x86-64 Linux, arm64

v2.0.1 · macOS and Linux

Verify the download

On your computer, run shasum -a 256 <the file you downloaded>. It should print the SHA-256 for the one you chose.

macOS, Apple silicon · 18.6 MB 99018fb9744e5ace2b44557550dc333496239912c0e9b1137266d4922c803346

Linux, x86-64 · 23.8 MB 1ef5373f8ecd9ba63d2c3fab98abb0d31b2244a2aac31b3749fb205c7d5f5b38

Linux, arm64 · 22.1 MB e421005ee47cba58293dce4277bb784e4cfe706dbbcb8617d671629d0238be18

Source code All releases and notes