The latest articles on DEV Community by Elmore (@_abb39549bd36adc5998). https://dev.to/_abb39549bd36adc5998 https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3822576%2Fa9763d34-e742-4f3c-8ba8-d5173a442f56.png https://dev.to/_abb39549bd36adc5998 en Elmore Fri, 13 Mar 2026 15:17:37 +0000 https://dev.to/_abb39549bd36adc5998/i-spent-months-building-an-e2ee-note-app-with-pocketbase-and-vanilla-js-28b7 https://dev.to/_abb39549bd36adc5998/i-spent-months-building-an-e2ee-note-app-with-pocketbase-and-vanilla-js-28b7 <p><a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fzopt8873xs23zarx4soi.png" class="article-body-image-wrapper"><img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fzopt8873xs23zarx4soi.png" alt=" " width="800" height="386"></a></p> <p>Backend: PocketBase. It’s a single binary that handles Auth, Database, and File storage.</p> <p>Frontend: 100% Vanilla JavaScript. I wanted to keep the bundle size tiny</p> <p>How the Encryption Works</p> <div class="highlight js-code-highlight"> <pre class="highlight plaintext"><code>Key Derivation: I use PBKDF2 to derive a master key from the user's password. Encryption: Notes are encrypted in the browser using AES-GCM 256-bit. Zero-Knowledge: The PocketBase backend never sees the password or the decrypted notes. Everything is stored as an encrypted blob. </code></pre> </div> <p>Features:</p> <div class="highlight js-code-highlight"> <pre class="highlight plaintext"><code>Dual Editor Mode: Fast Plain Text or a "Super Editor" built on Tiptap. Deep Search: The app decrypts notes locally in batches to allow for full-text search across the encrypted vault. Version History: Automatic snapshots for every note. Encrypted Export: can export your entire database as a secure html file. </code></pre> </div> <p>I’d love to get your thoughts on the UI or the security implementation.</p> <p><a href="https://dev.tourl">veronote.com</a></p> javascript showdev security