Memento Security
Protecting your memories with advanced encryption
End-to-End Encryption
At Memento, we believe your personal memories deserve the highest level of protection. Our end-to-end encryption ensures that only you can access and read your journal entries.
How Our Encryption Works
Device-Side Encryption
Your entries are encrypted directly on your device before they're sent to our servers, using AES-256 encryption.
Private Key Ownership
Only you possess the encryption keys to your data. We never receive or store these keys on our servers.
Secure Storage
Your encrypted data is stored on secure servers, but remains unreadable without your personal encryption keys.
Technical Details
Encryption Algorithm
We employ AES-256 (Advanced Encryption Standard with 256-bit key length), which is a symmetric encryption algorithm that's recommended by security experts worldwide and used by governments to protect classified information.
Key Generation
Your encryption keys are derived from your password using PBKDF2 (Password-Based Key Derivation Function 2) with a high number of iterations, making brute force attacks computationally infeasible.
Data Integrity
We use HMAC (Hash-based Message Authentication Code) to verify that your data hasn't been tampered with during transmission or storage.
Account Recovery & Data Protection
How Password Recovery Works
Memento balances security with usability through our specialized account recovery system. Here's how it works:
Account Authentication
When you request a password reset, we verify your identity through your email address and security questions.
New Password Creation
You set a new password, which generates a new set of encryption keys for future entries.
Data Accessibility
We restore access to your account information and unencrypted data, while notifying you about encrypted content.
Our Recommendation
Use a password manager to securely store your Memento password.
Regularly export important entries as a backup measure for your most valued memories.
Consider enabling recovery options in your account settings to increase your chances of full data recovery.
Benefits of Our Approach
Complete Privacy
No one, not even our team, can read your journal entries. Your personal thoughts and memories remain completely private.
Protection from Breaches
Even in the unlikely event of a data breach, your information remains securely encrypted and inaccessible without your unique keys.
Legal Protection
We cannot be compelled to provide your unencrypted data to third parties because we simply don't have the ability to decrypt it.
Control Over Your Data
You maintain complete control over who can access your journals, with the option to securely share specific entries if you choose to.
Frequently Asked Questions
What happens if I forget my password?
While you can reset your password through our password recovery system, this creates a new encryption key. Your account access will be restored, but previously encrypted data may not be recoverable as it was secured with your original encryption key. We recommend using a password manager to avoid this situation. For additional security, you can regularly export important entries as a backup.
Can I still use the app offline?
Yes, Memento works offline. Your entries are encrypted locally and synced when you reconnect to the internet. The encryption keys remain on your device at all times.
How do I know my data is really encrypted?
Memento's encryption implementation is open for security researchers to review. We also conduct regular third-party security audits to verify the integrity of our encryption methods and publish the results.
Can I share entries securely with others?
Yes, you can securely share specific entries with trusted contacts. When you choose to share, we create a temporary, one-time encryption key for just that entry, allowing secure, controlled sharing while maintaining encryption.
Start Journaling with Peace of Mind
Join thousands of users who trust Memento to keep their personal memories secure and private with our state-of-the-art encryption.