Skip to content

FAQ

Claspt is a cross-platform personal notes vault that combines markdown note-taking with AES-256 encrypted secret storage. You write notes in markdown, and anywhere you need to store a password, API key, credit card number, or any sensitive value, you insert an encrypted secret block directly in-line. Your notes and secrets live together in a single, portable file.

How is Claspt different from 1Password or Bitwarden?

Section titled “How is Claspt different from 1Password or Bitwarden?”

Traditional password managers are built around login credentials and browser autofill. Claspt is built around notes with embedded secrets. If you want to document a server setup and include the SSH key, API tokens, and admin password right alongside your notes — all encrypted — that’s what Claspt is for. Password managers and Claspt complement each other well.

Obsidian is a powerful markdown editor, but it has no built-in encryption for individual values. To store secrets in Obsidian, you’d need third-party plugins with varying security guarantees. Claspt provides first-class :::secret blocks with AES-256-GCM encryption, per-block unique nonces, and Argon2id key derivation — no plugins required.

No. Claspt is local-first. Your vault is a directory on your filesystem containing standard .md files. Cloud sync is an optional Pro feature, and even when enabled, all data is end-to-end encrypted before it leaves your device. The sync server never sees plaintext.

Can I use Claspt with Obsidian or VS Code?

Section titled “Can I use Claspt with Obsidian or VS Code?”

Yes. Your vault is a folder of plain .md files with YAML frontmatter. You can open the same directory in Obsidian, VS Code, or any markdown editor. Secret blocks will appear as :::secret[Label] fences with encrypted ciphertext — other tools can’t decrypt them, but the files remain valid markdown.

If you have Git sync or cloud sync (Pro) enabled, your vault is backed up remotely. Set up Claspt on a new device, enter your master password, and your vault — including encrypted secrets — will be restored.

Without sync, we recommend regular backups of your vault directory. The entire vault is a self-contained folder you can copy with any backup tool. You’ll need your master password to decrypt secrets on the new device.

Yes. Go to Settings > Security > Change Master Password. Claspt re-derives the password key, re-encrypts the master key, and writes an updated vault.key. All existing secret blocks continue to work because they’re encrypted with the master key, not the password directly.

There is no recovery mechanism. Your master password is never stored or transmitted anywhere. If you have biometric unlock enrolled, you can still access your vault and change the password. Otherwise, your non-secret markdown content is still readable as plain text, but encrypted secret values are permanently inaccessible.

See the Troubleshooting guide for more details.

Yes. Go to Settings > Export to download your vault as a zip archive or structured CSV/JSON. Exports include all pages with their content and metadata. You can export at any time, on any tier.

Yes. The core experience — unlimited pages, unlimited secrets, full AES-256 encryption, local vault, Git history, search, themes, generator, utilities, and export — is free forever with no artificial limits.

Pro adds cloud sync (up to 5 devices), password manager import, sharing, and email support. Pro+ adds encrypted vault storage, up to 10 devices, and priority support. See the Pro Features guide for the full comparison.

Not currently. A browser extension for quick-capture is on the roadmap. Claspt is a desktop application focused on note-taking with embedded secrets rather than browser-based password autofill.

A mobile app for iOS and Android is in development. It will support the same vault format and cloud sync as the desktop app.

The source code is available on GitHub for security auditing. The license allows inspection and audit but restricts redistribution and commercial modification.

PlatformArchitectureFormat
macOSUniversal (Intel + Apple Silicon).dmg
Windowsx64.msi
Linuxx64.deb, .AppImage

Sync is end-to-end encrypted. Your vault data is encrypted on your device before it’s sent to the sync server, and decrypted only on your other devices. The server stores opaque encrypted blobs — it never has access to your plaintext content or secrets. Each device derives its own key from your master password independently.

Not currently. Claspt supports one vault per installation. If you need separate vaults (e.g., personal and work), you can run separate installations pointing to different directories, but this is not officially supported.

Your vault lives at the location you chose during setup — by default, ~/Claspt/. Inside that directory:

  • Your pages are .md files organized in folders.
  • Vault configuration is in the .securenotes/ subdirectory.
  • Version history is in the .git/ subdirectory.

Everything is on your local filesystem. Nothing is sent to any server unless you explicitly enable cloud sync.

Email [email protected]. Pro subscribers get email support; Pro+ subscribers get priority response times. Community support is available through the GitHub repository for all users.