Online notepad & secure notes — private notes, no account
An online notepad should be the fastest way to write something down: open the page, type, done. Carbide's Notepad works exactly like that — it saves automatically on every keystroke, needs no account, and keeps your text in your own browser rather than on a server.
And when a note is genuinely private — a gift list, a draft you don't want on a shared screen — Secure Notes puts it behind a 4-digit PIN, still stored only on your device. This post explains how both work, where the notes actually live, and what the honest limits are.
A notepad that autosaves in your browser and works offline
The Notepad has no save button because it never needs one — every keystroke is written straight to your browser's storage, and the meta row confirms it with an auto-saved indicator and a live word count. Here is the whole workflow:
- Open the Notepad — no sign-up, no cookie-wall, just a text area.
- Start typing. Each keystroke is saved automatically to your browser; there is nothing to click.
- Watch the meta row: the auto-saved indicator plus a live word count as you write.
- Close the tab whenever you like. Reopen the page later and your text is exactly where you left it.
- Use the copy button when you are done to paste the note into an email, a chat or a document.
Where are your notes actually stored?
Your notes live in the browser's local storage — a small data store that each website gets on your own device. Only pages from the same site can read it: another website cannot open Carbide's storage, and Carbide's page never sends its contents anywhere. The page loads once; after that, writing and saving need no network at all, so a dropped connection mid-thought costs you nothing.
Two properties follow from that design. First, privacy: there is no server copy, no retention window and no database to breach — nothing is uploaded, so there is nothing to leak. Second, locality: local storage is per browser, per device. Chrome on your laptop and Safari on your phone each keep their own note, and they do not sync. That is the deliberate trade — your text stays where you typed it, full stop.
When you need a PIN: lock private notes behind Secure Notes
Some notes should not sit one tap away on a shared computer or a borrowed phone. Secure Notes keeps a small vault of titled notes behind a 4-digit PIN: set the PIN once, add as many notes as you need, and the list stays sorted with the most recently edited on top. Like the plain notepad, the vault lives only in your browser's storage — no account, no server, nothing uploaded.
Be clear about what the PIN is: a privacy gate against casual snooping, not a bank-grade vault. The web version locks the interface; it does not encrypt the underlying storage. So keep gift lists, journal drafts and private reminders there — but not banking credentials. Real passwords belong in a password manager, generated with the Password Generator (the strong password guide shows how). The Carbide apps, coming soon, take the same vault further with genuine on-device encryption through the system keystore and fingerprint unlock.
Cloud notepads vs on-device notes — the privacy comparison
Most online notepads are cloud products: you create an account, your notes are stored on the company's servers, and in exchange you get sync and share links. Even the privacy-focused ones that encrypt your notes still hold the encrypted blobs — your data sits in someone else's infrastructure, governed by their retention policy.
On-device notes flip the model. There is no account to create, no server copy to retain and no third party to trust — which also means no sync and no share links. The honest way to choose is per note:
- Need the note on every device, or shared with someone? A cloud notes app is the right tool.
- Quick capture, drafts, anything sensitive? On-device wins: Notepad for speed, Secure Notes when it needs a PIN.
- Never store your only copy of something irreplaceable in any single place — cloud or local.
What happens if you clear browser data — or forget your PIN
Because the only copy of your notes is in the browser's local storage, clearing that storage deletes them. "Clear browsing data" with site data included, a privacy cleaner, or uninstalling the browser all wipe the note and the vault alike — there is no server backup to restore from. Before a cleanup, take ten seconds to copy anything important out of the Notepad into a file or an email draft.
The same no-server design shapes the forgot-PIN answer. There is no recovery email, because there is no account; nobody — including Carbide — can reset the PIN remotely. The only way to reset the vault is to clear the site's data, which deletes the notes locked inside it. So pick a PIN you will actually remember, and keep long-term essentials somewhere you control, with the vault holding the private-but-replaceable notes.
Make notes part of your text workflow
A notepad gets more useful next to the rest of the text toolkit. The Notepad shows a live word count while you type; when you need the full picture — characters with and without spaces, sentences, reading time — paste the draft into the Character Counter. The character counter and case converter post covers those limits-and-counts workflows in depth.
Drafted a heading in the wrong case? The Text Converter switches text between UPPER, lower, Title and Sentence case in one tap. And if what you are about to write down is a password — don't. Generate a strong one with the Password Generator instead, store it in a password manager, and see the password generator guide for what makes a password actually strong. For the rest of the privacy toolkit, the private browser and app lock roundup is the next read.
Frequently asked questions
Is there a free online notepad that doesn't need an account?
Yes. Carbide's Notepad is free with no sign-up: open the page and start typing. Every keystroke is saved automatically in your browser, and your note is waiting when you come back.
Are my notes uploaded to a server?
No. Both the Notepad and Secure Notes keep your text in the browser's local storage on your own device. Nothing is uploaded, so there is no server copy to leak, retain or breach.
What happens if I clear my browser data?
Clearing site data deletes your notes — the browser's local storage holds the only copy, and there is no server backup. Copy anything important into a file or email draft before running a cleanup.
What if I forget my Secure Notes PIN?
There is no recovery, because there is no account or server — nobody can reset the PIN remotely. The vault can only be reset by clearing the site's browser data, which also deletes the notes inside it, so choose a PIN you will remember.
Do my notes sync between my phone and my computer?
No — by design. Local storage is per browser, per device, so each device keeps its own notes. That is the privacy trade-off: no sync, but also no account and no copy of your text on anyone's server.
Fast notes and private notes are one storage story: your text stays in your browser, on your device, with no account and nothing uploaded. Open the Notepad for everyday capture, move anything sensitive into Secure Notes behind a PIN — and remember that the only copy is the one on your device.