SealedSpace Open app
For individuals

Your private workspace. Yours alone to read.

Notes, files and on-device AI — sealed end-to-end on a server that can’t read a word. Works fully offline, syncs across your devices, and stays yours. No overhead, no upsells. Free, forever.

Start personal Working with others?
  • Zero-knowledge
  • Local-first
  • On-device AI
  • Free forever
Everything in one place

Your private workspace, end to end

Docs, files and on-device AI in a single encrypted space — no accounts to wire together, and nothing the server can read.

Docs & databases, your way

A block editor with 30+ block types and inline databases — every keystroke encrypted on your device before it’s ever stored.

  • Databases with table, board, gallery and list views
  • Version history you can time-travel
  • Full-text search indexed on your device

Built different, on purpose

Privacy isn’t a feature tier here — it’s the architecture. Everything below falls out of that one decision.

  • On-device AI

    Generation runs in your browser over WebGPU. Your prompts, notes and drafts are never someone else’s training data.

  • Works fully offline

    Local-first storage means the app is whole without a connection. Changes sync when you’re back.

  • Private by default

    Everything is visible only to you. There’s no sharing toggle to get wrong — it simply stays yours.

  • Search that stays home

    Full-text search across everything, indexed entirely on your device.

  • Syncs across your devices

    Your space follows you everywhere, end-to-end encrypted in transit and at rest.

  • Leave anytime

    One encrypted backup file restores your whole workspace on a fresh device.

Pricing

Free. For real.

Personal SealedSpace costs nothing. Your data lives on your device and syncs across them, encrypted the whole way — we can’t read it, so there’s nothing to meter and nothing to upsell.

Personal

Everything one person needs.

$0 free forever
Start personal
  • Unlimited notes, docs & databases
  • Encrypted Drive for all your files
  • On-device AI — runs in your browser
  • Local-first: works fully offline
  • Syncs across all your devices
  • Passkey recovery + one-file encrypted backup

Need to work with others? See Teams →

Zero-knowledge by design

The server holds your data, never your keys

Every key is derived and used on your device. What the server stores is mathematically unreadable — here’s the actual chain.

  1. Your password + 24 words

    Identity starts from a password and a 24-word recovery phrase — or a passkey, so you never hand-keep the phrase.

    argon2id(password) → vaultKey

  2. Keys derived on-device

    Signing and encryption keypairs are generated client-side and locked with your vault key before anything is stored.

    ed25519 · x25519 · AES-256-GCM

  3. Sealed to your keys

    Your space key is wrapped to your own keys before anything syncs. Access is cryptographic, not a permission flag.

    wrap(spaceKey, yourPubKey)

  4. Server sees ciphertext

    Notes and files — all sealed before upload. A full server breach leaks nothing readable.

    9f2c…e81b — opaque bytes

  • Encryption you can’t misconfigure

    There is no “enable encryption” toggle to forget — plaintext storage simply doesn’t exist in the system.

  • Passkey recovery

    Enroll a passkey and recover your account with your device’s biometrics — the recovery phrase becomes optional to keep on paper.

  • Private version history

    Time-travel through encrypted snapshots of any doc with the same zero-knowledge guarantee.

  • Only your keys unlock it

    No company, no server admin, not even us can read your space — it’s unreadable to everyone without your password or passkey.

Use it anywhere

SealedSpace runs as a fast web app, installs as a PWA, and ships native desktop apps for macOS, Windows and Linux. Mobile apps are on the way.

  • Web app

    Runs in any modern browser — open a tab and you’re working, nothing to install.

  • Install as a PWA

    Add it to your dock or home screen in one click; it works offline like a native app.

  • macOS

    Native desktop app with the local AI sidecar built in.

    Apple Silicon Intel

  • Windows

    Native installer for Windows 10 and 11 (64-bit).

    Download for Windows

  • Linux

    Portable AppImage — no install required. A .deb is on the releases page.

    Download for Linux

Own your data in four steps

No setup theatre — you’re writing securely in under a minute.

  1. 01

    Create your vault

    A password and a 24-word recovery phrase derive your keys on-device. That’s the whole identity setup.

  2. 02

    Work offline or in sync

    Write notes and docs that save instantly and locally, then sync seamlessly across your devices.

  3. 03

    Bring in on-device AI

    Turn on local AI to search, summarize and draft across your notes — it runs in your browser, nothing uploaded.

  4. 04

    Keep control

    Export a full encrypted backup anytime — your workspace is portable and yours to leave with.

A second brain only you can open

Capture everything, search it instantly, and let on-device AI help — all without a single byte leaving your control. Start in under a minute, no card, no catch.

Start personal See Teams