October 27, 2026

Secure online journal: what "secure" actually means

An online journal has a real advantage: you find it on your phone, your computer, anywhere. Almost all of them call themselves "secure". The word is reassuring, but it doesn't say against whom. Against someone snooping on the café wifi? Against a hacker stealing data from the server? Against the company that makes the app? These are three different protections, and an app may offer only one.

Three levels of encryption

In transit

The padlock in the address bar means your entries are encrypted between your device and the server. No one can read them on the way. It's the bare minimum, and almost every site has it today. It says nothing about what happens once your entries arrive.

On the server

Your entries are stored encrypted. Someone who stole the server's disks wouldn't get anything readable. But the company holds the key. Its staff, or anyone who gains access to its systems, can in principle open your journal again.

End to end

Your entries are encrypted on your device before they leave, with a key only you hold. The server stores data it can't read. It's the only level where "private" means private, including from the company itself.

The first two are common. The third is rarer, and an app that offers it usually says so clearly. If its security page talks about "encrypted data" without saying which data or with whose key, assume it's one of the first two.

What encryption doesn't cover

• Your account. An online journal opens with an email and a password. If that password is used elsewhere and leaks, your journal is open. A unique password and two-factor authentication, if the app offers it, matter as much as encryption.
• What the app does with your entries. Some analyze what you write to offer summaries, a mood chart, suggestions. To do that, they have to be able to read it, sometimes by sending it to an outside service. A handy feature can be a sign that your journal isn't end-to-end encrypted.
• What pays for the service. The privacy policy should say whether your data is used for advertising, and who it's shared with.
• The end of the service. If the app shuts down, what happens to your journal? A full export, in a format you can read elsewhere, is the only insurance.

Five things to check before you write

1. Does the security page mention end-to-end encryption, or only "encrypted data"?
2. If you forget your password, can the company give your entries back? If so, it holds the key.
3. Does the app analyze your entries? Summaries, moods, suggestions: something is reading them.
4. Where is your data hosted, and who has access? The privacy policy should answer plainly.
5. Can you export everything, in a form you can read without the app?

For a journal protected by a passcode on your phone, the questions change a little: they're in Journal app with passcode: what it really protects.

The other option: keep it offline

The best-protected data on a server is data that never went there. A journal that stays encrypted on your phone has no server to hack, no company to trust, and no online password that can leak.

It comes at a price. No access from your computer. And if the phone disappears, so does the journal, unless you kept a copy. Security no longer depends on the company: it depends on you.

There's no right choice for everyone. An end-to-end encrypted online journal is a solid compromise. An online journal that's merely "secure" asks you to trust the company. That's possible, as long as you know it.

Why Eliveo isn't online

Eliveo is a voice journal. We chose the other option.

• Your recordings never leave your phone. They're encrypted there with a key created on the device. The app has no server to receive them, and we don't have the key.
• No online account. A 6-digit code and a 12-word recovery phrase. No email, no password that could leak elsewhere.
• No one listens. No transcription, no analysis of your voice.
• No copy behind your back. The app's data is excluded from Android's automatic backup: it isn't sent to your Google account.

The trade-off is deliberate: no access from a computer, and a phone lost without an export means your recordings are lost. Exporting creates an encrypted file that only opens with your recovery phrase. You can store it in a cloud: the service will keep it without being able to read it.

Eliveo is free during the beta on Android.

"Secure" isn't enough

The word doesn't tell you who can read. For a private journal, that's the only question that matters. Ask it before you write the first page.