Plain Markdown files
Your vault is a folder. Open it in any editor, back it up with anything, and leave whenever you like.
Arkana keeps everything as plain Markdown on your PC, with passwords and keys encrypted. Sync across devices through a server that can never read your data.
Prefer to stay offline? Local vaults need no account.
••••••••••••Spaces, collections and six item types. Nothing else to configure, nothing to learn.
Your vault is a folder. Open it in any editor, back it up with anything, and leave whenever you like.
Notes, ideas, tasks, accounts, snippets and contacts, each with just the fields that matter.
Passwords and keys are encrypted with your passphrase and hidden until you reveal them. The clipboard clears itself.
Everything, titles included, is encrypted on your device first. The server stores ciphertext only.
Unlock and read your notes with no connection. Changes sync when you are back online.
Forget your passphrase and your offline recovery key still gets you back in.
Type something. This is what a server would store: AES-256-GCM ciphertext, produced by your browser right now with a throwaway key that is discarded when you leave this page.
No setup wizard maze. Three steps.
Install the Windows app, or run the portable build from any folder.
Sign up here with your email, and add two-step sign-in with any authenticator app.
Set it in the app. It never leaves your device, and you get a recovery key as a backup.
Same app, same files. Move between the two whenever you like.
A folder on your PC. No account.
An account on the Arkana server.
Download Arkana for Windows, create an account if you want sync, and choose your passphrase.
Checking for the latest version…Windows may show a SmartScreen warning for new apps. Check the SHA-256 above against your download before running it.
Short, honest answers.
No. In a synced vault, everything is encrypted on your device with a key derived from your passphrase before it is uploaded. The server only ever holds ciphertext and wrapped keys.
Use the recovery key shown once when you set up your vault. Without both, the data cannot be recovered. That is the price of the server not being able to read it.
Only to sync. A local vault is just a folder on your PC and needs no account or internet connection.
Your login password and two-step code get you into your account. Your vault passphrase decrypts your data, and it never leaves your device. Keeping them separate means a stolen login still cannot read anything.
Yes. Export a synced vault to a folder of Markdown files at any time, and open it in any editor.