Encrypted before it leaves
Your password is turned into a key on your own device, using Argon2id. What reaches the server is a separate authentication value that cannot be turned back into that key.
Your bookmarks, on every browser,
readable only by you.
Bookmark Atlas syncs bookmarks between Chrome, Firefox and Safari. Everything is encrypted on your device before it leaves — the server stores ciphertext and has no way to read it.
Not even we can read them
This is not a policy promise — it is what the design allows. We hold no key to your bookmarks, so a subpoena, a breach or a dishonest administrator yields ciphertext and nothing else.
Merges instead of overwriting
Edit on your laptop while your phone is offline and both sets of changes survive. Deletions carry tombstones, so nothing quietly reappears and nothing quietly vanishes.
Safari included
Safari gives extensions no bookmarks API, so we ship a native macOS app instead. It is the only way to sync Safari at all — and we say so plainly rather than pretending otherwise.
What we cannot do
If you forget your password and lose your recovery key, your bookmarks are gone. There is no reset that brings them back, because there is no copy of the key anywhere but on your devices. That is the direct cost of the guarantee above, and it is worth knowing before you sign up rather than after.
The web app is served by the same party that runs the server, so its code arrives fresh on every visit. A signed extension or the native app gives you stronger guarantees, because their code does not.