How your journal is protected
Part by part, plainly: what stays on your device, what a passphrase seals, what Face ID or a PIN adds, and what leaves, sealed, for your cloud and your buddies.
Ana got the job in Lisbon. We celebrated with pastéis de nata on the station steps.
- Saved in
- This browser only
- Algorithm
- —
- Sent to a server
- Nothing
Illustration. With a passphrase, dates, moods and word counts are still stored unencrypted.
On your device, with or without a passphrase
Dogood has no account and no server holding your journal: it lives in your browser. A passphrase is what seals it.
Without a passphrase
- Kept in this browser’s own storage, on this device, and nowhere else unless you sync it or save a backup.
- Anyone who opens Dogood on this device can read it, as they could a notebook left on a desk.
- Synced to your cloud or saved as a backup, its files can be read by whoever opens them.
With a passphrase
- Each page and its title, your photos, chapters, goals and habits are encrypted on the device before they are stored.
- Synced files and backups stay encrypted: Google, Dropbox or Microsoft see file names and sizes, never a word.
- Left readable on the device, for the calendar and Lifetime: each day’s date, mood and word count.
Your passphrase is the key
Not a password Dogood checks: the key itself, made on your device each time it is typed.
You type it
On your device alone: it is never sent anywhere, nor kept.
It becomes the key
310,000 rounds of PBKDF2-SHA-256 turn it into a 256-bit key, slow to guess on purpose.
The key seals each thing
AES-256-GCM, with a fresh random value each time: the same words never look the same twice.
There is no recovery key. Forget the passphrase and nobody can open the journal, not even Dogood: keep it somewhere safe, a password manager or a note at home.
Face ID, a fingerprint or a PIN, once the passphrase is set
A faster way in on the phone or computer you write on, not another lock: to open the journal, one of them is enough.
- They come after the passphrase: setting one up asks for it.
- Each keeps its own copy of the key, locked by your face or finger (a passkey of this device) or by your PIN (1,000,000 rounds), on this device alone.
- Your face and fingerprint never leave the device: it only says yes or no.
- After 5 wrong PINs, the PIN is forgotten and the passphrase opens the journal again.
- A PIN is a screen lock, against the people around you: someone who copied this browser’s data could try every PIN. Face ID or a fingerprint is stronger, and the passphrase stays the real key.
- Your passphraseThe key itself, on any device
- Face ID or a fingerprintA copy of the key, on this device
- A PINA copy of the key, on this device
One of them is enough, never two.
What opens your journal
Protected, it locks itself after 10 minutes without activity, and sooner once you leave it.
- Without a passphrase
- Nothing to type: it opens at once
- With a passphrase
- Your passphrase
- With Face ID or a fingerprint too
- A glance or a touch, or your passphrase
- With a PIN too
- Your PIN, 6 to 8 digits, or your passphrase
- After 5 wrong PINs
- Your passphrase
- On another device or browser
- Your passphrase, until Face ID or a PIN is set up there too
Beyond your device
What leaves it, only when you choose, and how.
Sync
Sealed with the same key before it leaves: your Google Drive, Dropbox or OneDrive holds files it cannot read. Nothing passes through Dogood.
Backups
A file you keep. Protected, it stays encrypted, and opens with your passphrase.
Writing buddies
They see your first name, whether you wrote today and how many days you have written. Never a word, a photo or a mood.
The evening reminder
Encrypted for your browser’s push service, which carries it without reading it. It names the buddies who wrote, or your streak, never your pages.
Dogood Plus
Your licence says nothing about you: no name, no email, not a word of the journal.
What Dogood never sees
- Your pages
- Your photos
- Your moods
- Your passphrase
- Your PIN
- Your face or fingerprint
The rest, from the licence to the buddies’ streaks, is in how your data is handled.