Question 1

Is Burn Note really secure?

Accepted Answer

Yes. Burn Note uses AES-256-GCM encryption, performed entirely in your browser. The encryption key exists only in the URL fragment (the part after #), which is never sent to the server. This is called zero-knowledge encryption — even we cannot read your notes.

Question 2

Can the server read my notes?

Accepted Answer

No. The server only stores encrypted ciphertext. The decryption key is embedded in the URL fragment, which browsers do not include in HTTP requests. Without the key, the encrypted data is unreadable.

Question 3

What happens after a note is read?

Accepted Answer

The note is permanently deleted from the server the moment it is retrieved. There are no backups, no recovery options, and no way to access it again. One read, then it's gone forever.

Question 4

Do I need to create an account?

Accepted Answer

No account or sign-up is required. Burn Note is completely free and anonymous. Just write your note, get a link, and share it.

Question 5

Can I add a password for extra protection?

Accepted Answer

Yes. You can optionally set a password that the recipient must enter before the note is decrypted. The password adds an additional layer of encryption using PBKDF2 key derivation with 600,000 iterations.