← Back to TextSafe

How TextSafe Works

The mechanics of private text storage, explained plainly.

Saving Text

There is no password recovery. If you forget your passcode or color, the encrypted data remains on the server but cannot be decrypted. It will be automatically deleted when the retention period expires. We cannot help you retrieve it.

Retrieving Text

Once retrieved, you can edit the content. Changes are auto-saved after the initial save, so you do not need to repeat the color selection process for subsequent edits.

Technical Details

For those interested in implementation specifics:

Key Derivation

Your passcode and color index are concatenated and processed through PBKDF2 with 100,000 iterations using SHA-256. This produces a 256-bit AES encryption key.

Encryption

Content is encrypted with AES-256-GCM via the Web Crypto API. A cryptographically random 12-byte IV is generated for each save operation.

Storage Identifier

The encryption key is hashed with SHA-256 to create a 64-character hex storage ID. This hash is irreversible.

Data Deletion

A background thread runs every hour, executing DELETE queries against all rows where expires_at < NOW(). Deleted data is not recoverable.

Practical Tips

Two Pieces of Information

A passcode and a color. That is all you need to remember.

Open TextSafe