What Is AES-256 Encryption?
Learn how encryption works and how Dash uses AES-256-GCM, PBKDF2 key derivation, and zero-knowledge architecture to keep your notes private.
Readable content
a7f3e2b1...
9c4d8f6e...
2b1a7f3e...
What Is Encryption?
Encryption transforms readable data into unreadable ciphertext. Only someone with the correct key can reverse the process.
Symmetric Encryption
Same key encrypts and decrypts. Faster, used for data at rest. AES and ChaCha20 are examples.
Asymmetric Encryption
Uses public + private key pair. Slower, used for key exchange. RSA and ECDSA are examples.
Why AES-256-GCM?
Proven security with decades of cryptanalysis. Hardware-accelerated. Provides both confidentiality and authentication.
PBKDF2 Key Derivation
Your password alone is not an encryption key. Key stretching transforms it into one that's cryptographically strong.
Password to Key
Your password cannot be used directly as an encryption key. PBKDF2 transforms it into a cryptographically strong 256-bit key.
600,000 Iterations
Each iteration makes key derivation slower intentionally. A legitimate user waits milliseconds; an attacker trying billions of guesses waits years.
Unique Salt Per Page
Each encrypted page gets a random 128-bit salt, preventing rainbow table attacks and ensuring identical passwords produce different keys.
SHA-256 Hash Function
PBKDF2 uses SHA-256 as its underlying hash function, a NIST-approved standard used across security-critical applications.
WebCrypto API
Dash uses the browser-native WebCrypto API for all cryptographic operations - audited, hardware-accelerated, and battle-tested.
Open Source
Every line of encryption code is publicly auditable on GitHub. Security through transparency, not obscurity.
How Dash Encrypts Your Notes
A three-step process that turns your password into military-grade protection.
Set Password
Enter a password for this page
Key Derivation
PBKDF2-SHA256
600K iterations + unique salt
AES-256-GCM
derived key + random IV
confidentiality + auth
Technical Specifications
The cryptographic primitives and parameters Dash uses under the hood
Encryption Details
AES-256-GCM
Authenticated encryption with associated data
PBKDF2-SHA256
600,000 iterations for password stretching
128 bits
Prevents rainbow table attacks
96 bits
GCM recommended nonce size
256 bits
Maximum AES strength
bcrypt
10 rounds for verification
WebCrypto API
Browser-native, hardware-accelerated
What This Means For You
Strong encryption comes with trade-offs. Here is what you should know.
No Master Password
Each page can have its own password. No single point of failure.
No Password Recovery
Your password never leaves your device. Nobody can reset it. This is a feature - only you can read your notes.
No Cloud Dependency
Encryption works fully offline. No internet, no server, no account needed.
Get Dash Today
Join thousands of privacy-conscious users who've chosen Dash over corporate surveillance. One payment, lifetime access.
Dash
Private Notes App
Encryption FAQ
Protect your notes with real encryption
AES-256-GCM encryption for $14.99. One-time purchase.