šŸš€ Bear 2.4: Better encryption, auto todo sorting and pin within tags

On an encryption level (algorithm, keys, …), Bear is pretty much there but I think the main difference is that the 1Password vault is fully encrypted. To grant all the functionalities we want an encrypted note ha its title, tags, and other metadata exposed while a potential attacker doesn’t even know a 1Password secure note is there.

3 Likes

Thank you. Had been debating on switching from Apple’s password app/keychain to 1Password, but from my limited understanding, Apple keychain is pretty secure, but only has a limited number of fields. So, I’ll continue using keychain for passwords.

I am wanting to store things like software keys, etc. It sounds like Bear will work great for that.

No additional subscriptions! Bear for the win again!

2 Likes

Thank you so much for the todo-list especially!
As someone who uses and nourishes the todo-list in Bear I think the new feature is great.
It would definitely help me be on track for all the tasks that I need to complete.

1 Like

@BearProUser Do you do your task list all in Bear? Even for any recurring ones?

I have some further questions:

  1. When you say the note title isn’t E2EE, do you mean only the title at the start of the note? The headers inside the note are still E2EE, aren’t they?
  2. How is E2EE for note titles and tags making Bear Web impossible to use? As far as I understand, Bear Web can’t be used once ADP is on, so making tags and titles E2EE doesn’t change anything. Or am I missing something?

Just the title that you see in the note preview inside the notes list, all the rest is under ADP.

Even without ADP enabled, we use the same encrypted fields on iCloud. Since these fields can’t be queried, it limits how the web app can access the data, particularly titles and tags, which are essential for the app to function properly.

1 Like

Hello Matteo.

Thank you for adopting Apple’s ADP CloudKit function and improving Bear’s E2EE by allowing attachments.

One question remains (for me): Are notes’ titles encrypted in some capacity? Are they encrypted in transit to go into apples cloud and encrypted at rest there (with apple holding the keys)?

Tks

Yes, all the data we’re syncing with CloudKit is encrypted in transit and at rest on the Apple servers (Apple holds the keys).

1 Like

Would backing up all notes, deleting all notes, then importing them from the backup on iOS work to enable the ADP without editing all notes? (Currently my iCloud sync is off)

There’s no setting in General for the todo list sorting.

I’m on the latest version… it’s only available on the individual document.

Seems this has been miscommunicated in the release note?

You don’t see this option?

THANK YOU for ADP support! Now to migrate back to Bear from Apple Notes… X_X