← Directory

UnKeep

A private, self-hosted, Google Keep-style notes app with end-to-end encrypted sync.

  • Productivity
  • Tools & Utilities
A private, self-hosted, Google Keep-style notes app with end-to-end encrypted sync. Notes are encrypted on your devices; this container only stores ciphertext. AI agents and scripts can use the same vault through the bundled unkeep CLI. HTTPS is required: on plain HTTP (including the WebUI button) you'll see an "UnKeep needs HTTPS" page. Use Tailscale Serve, a reverse proxy, or Cloudflare Tunnel. Set two different random tokens below (openssl rand -hex 32). On your first device, enter the setup token and save the recovery kit. Back up appdata before updating.

Platform availability

Available on 1 of 9 platforms

  • Unraid
  • TrueNAS (not listed)
  • Umbrel (not listed)
  • ZimaOS (not listed)
  • Proxmox (not listed)
  • Helm (not listed)
  • Mac (not listed)
  • Windows (not listed)
  • Linux (not listed)

Health score?A 0-100 score computed nightly from four factors: maintained (40%: recent commits and steady activity), popular (25%: GitHub stars, log scale), easy to install (20%: platforms, install notes, setup guides, Docker image) and light to run (15%: minimum RAM, ARM support). When the source code has been checked, a fifth factor, security check (20%: automated scan for committed secrets, unsafe desktop-app settings, known-vulnerable dependencies and project hygiene; any serious finding caps it at 20), is added. Factors without data are left out and the rest are rescaled.

46/100 Fair

Maintained
88last commit 0 days ago
Popular
00 GitHub stars
Easy to install
201 install platform, Docker image
Light to run
No data

Based on 3 of 4 factors.

Availability: platform listings confirmed today

GitHub stars
0
Open issues
4
Last commit
2026-10-22
Latest release
v0.2.1
License
MIT
Activity
steady

Checked today - source: GitHub (BrettKinny/UnKeep)

Resources & Compatibility

Requirements not published yet.

Checked today - source: Docker Hub image tags and published docs

First-install notes

No first-install notes yet.

Alternatives

No alternatives collected yet.

Common questions

Do I need HTTPS to use the UnKeep web UI?

Yes. On plain HTTP, including the WebUI button, UnKeep shows an "UnKeep needs HTTPS" page. Use Tailscale Serve, a reverse proxy, or Cloudflare Tunnel.

What tokens do I need to set up the first device?

Set two different random tokens, for example with openssl rand -hex 32. On your first device, enter the setup token and save the recovery kit.

What does the server actually store?

Normal note and attachment sync sends only opaque AES-GCM envelopes to /data/unkeep.sqlite. The server never receives the vault key.

What should I do before updating?

Back up appdata before updating.

Can I share one instance with other users?

No. UnKeep is a single-user vault for trusted devices, terminals, and agents.

Answers sourced from github.com, github.com

Community

No community discussions collected yet.