App Lock That Actually Encrypts
Most app locks just hide your data behind a screen. Dash's app lock encrypts everything on disk with AES-256-GCM.
Dash is Locked
The Problem With Most App Locks
A password screen is not the same as encryption. Most app locks give you the appearance of security without the substance.
UI Gate Only
Most apps show a password screen on top of the app. Remove the screen and data is still plaintext on disk.
No Disk Encryption
Your notes are stored as readable text. Anyone with file system access — backups, forensic tools, malware — can read everything.
False Security
It’s a locked door with no walls. Casual snooping is blocked, but determined access bypasses it entirely.
How Dash's App Lock Works
Real encryption at every layer. Your password derives a key, and that key encrypts everything on disk.
Real Key Derivation
Your password is run through PBKDF2-SHA256 with 600,000 iterations to derive a 256-bit encryption key.
AES-256-GCM Encryption
All your pages are encrypted with authenticated encryption. Data on disk is ciphertext, not plaintext.
Touch ID Integration
Your password is stored in the OS keychain, protected by the Secure Enclave. Touch ID provides real decryption, not a UI bypass.
Auto-Lock
Encrypt notes automatically after inactivity. Options from 1 minute to custom durations. Closing the app also triggers encryption.
Encrypt on Every Save
Every edit is re-encrypted before writing to disk. Plaintext only exists in memory while you’re actively using the app.
Zero Knowledge
Your password never leaves your device. No server, no recovery, no way for anyone else to access your data.
The Full Encryption Flow
Three states your notes move through: setup, unlock, and lock.
Setup
Generate random 128-bit salt
Derive 256-bit key via PBKDF2
Encrypt all pages, wipe plaintext
Unlock
Password or Touch ID
Re-derive key, decrypt into memory
Lock
Encrypt all content in memory
Write ciphertext to disk
Clear plaintext from memory
App Lock vs Page Lock
Two independent layers of encryption. Use both, either, or neither.
One password encrypts everything. Automatic. Touch ID supported. Protects all pages that don't have individual locks.
Each page gets its own password. Independent encryption key. Survives app lock being disabled. Requires separate password entry.
Both layers work independently. Pages with individual locks are not double-encrypted. You can use both, either, or neither.
Technical Specifications
The cryptographic primitives and parameters behind Dash's app lock
Encryption Details
AES-256-GCM
Authenticated encryption with associated data
PBKDF2-SHA256
600,000 iterations for password stretching
128 bits
Unique per setup
96 bits
Unique per page per save
256 bits
Maximum AES strength
bcrypt (10 rounds)
For password verification
Electron safeStorage
OS keychain integration
1 min – custom
1 min, 5 min, 15 min, 30 min, custom, never
Page content
Titles/metadata readable for sidebar
Get Dash Today
Join thousands of privacy-conscious users who've chosen Dash over corporate surveillance. One payment, lifetime access.
Dash
Private Notes App
App Lock FAQ
Lock your notes with real encryption
AES-256-GCM app lock with Touch ID. $14.99 one-time purchase.