How Does Gekri Keep My Journal Entries Private and Encrypted?

Updated

Gekri is a privacy-focused online journal whose stated purpose is to let you "write every day in your encrypted private journal" and track your mood over time. Based on the site's own description, encryption is presented as a core property of the product rather than an add-on. What the public page evidence does not spell out is the exact cryptographic design — the specific algorithms, where keys are generated, or whether the operator can technically read entries. So the honest answer is: Gekri markets itself as an encrypted private journal, but you should verify the technical details before treating it as a zero-knowledge service.

What the site itself claims

From the available page evidence, Gekri describes two things:

  • Encrypted private journal — entries are written into a journal that is described as encrypted.
  • Mood tracking — you can track your mood to follow your level of happiness, which implies entries carry structured metadata (like a mood value) alongside free text.

That is the full extent of what the source material supports. There is no published detail in the evidence about key management, server-side access, or export formats.

The questions that actually determine your privacy

Encryption claims are only meaningful when you know who holds the key. These are the four things to check on any encrypted journal, including Gekri:

Question Why it matters
Where are entries encrypted — in your browser or on the server? Browser-side (client-side) encryption means plaintext never leaves your device. Server-side encryption means the operator handles plaintext at some point.
Who holds the decryption key? If the service holds it, the operator can in principle read your entries. If only you hold it, they cannot.
Is the key derived from your password, or stored separately? Password-derived keys tie access to something only you know; stored keys may be recoverable by the operator.
What happens if you forget your password? A true zero-knowledge design usually means no recovery — the data is unrecoverable. Recovery options often imply the operator can access data.

What you are responsible for

If Gekri works like most privacy-first journals, the security burden shifts to you:

  • Your password becomes the key. A weak or reused password undermines the encryption regardless of the algorithm.
  • Loss may be permanent. In zero-knowledge systems, forgotten passwords typically mean lost entries, because no one else can decrypt them.
  • Your device matters. Malware, a compromised browser, or someone with access to your unlocked device can read what you type before encryption ever happens.

How this affects daily writing

Strong encryption usually trades a little convenience for privacy:

  • You may need to unlock the journal each session rather than staying logged in indefinitely.
  • Password reset flows tend to be limited or absent.
  • Syncing across devices depends on your key being available on each device, which can mean re-entering credentials.

For a daily mood-and-journal habit, these are small costs — but they are real, and worth knowing before you commit years of entries.

How to verify before trusting it

  1. Look for a security or privacy page on gekri.com that names the encryption method and key handling.
  2. Check whether the site states that the operator cannot read your entries (a zero-knowledge claim) or only that data is encrypted in transit and at rest.
  3. Test with a throwaway entry: write something, then check whether any export or account feature reveals it in plaintext outside your unlocked session.
  4. Confirm what happens on password reset — if you can recover entries without your original password, the operator likely can too.

If the site does not answer these questions, treat the encryption as unverified and avoid storing anything you would not want exposed.