Notefox Account v2 (Sav Account)
Notefox Account v2 (also known as Sav Account) is the modern, next-generation backend and synchronization system powering Notefox. It has been redesigned from the ground up to offer superior security, higher reliability, multi-service flexibility, and smart conflict management.
What's New in Version 2
Version 2 introduces major architectural improvements and powerful new features:
- Unified Multi-Service Platform (Sav Account): Rather than being tied exclusively to Notefox, the account system is now product-neutral. A single Sav Account can synchronize data across multiple different extensions and applications independently. Each service operates in its own isolated workspace with separate revision tracking, preventing data collisions.
-
Smart Conflict Resolution & Revision Tracking: Sync operations now use server-side
revisions and atomic snapshot management. If notes are edited simultaneously across different devices or
during network delays, the system detects revision mismatches (conflict
409) instead of silently overwriting your changes, allowing clients to merge data safely. - Two-Tier Encryption Model (DEK & KEK): Your notes are encrypted using a dedicated, cryptographically generated Data Encryption Key (AES-256-CBC). This data key is wrapped with a Key Encryption Key derived from your master password (via PBKDF2 with 210,000 iterations). When you change your password, only the data key wrapper is re-encrypted—preventing past data loss and eliminating legacy limitations.
- Enhanced 2FA & Verification Security: Two-Factor Authentication (2FA) for logins is now flexible and configurable (can be enabled or disabled per account), while account signup email verification remains strictly enforced. OTP codes use cryptographically secure random generation, expire automatically after a set duration, and enforce a 5-attempt limit against guessing.
- Protection Against Brute Force & Mail Bombing: Strict rate limiting protects all sensitive authentication endpoints (signup, login, password changes, OTP verification) against automated attacks and spam. Account enumeration on registration is also mitigated.
-
Modern Cryptographic Standards: User passwords benefit from state-of-the-art hashing
(
argon2id/bcrypt/password_hash), session IDs are generated using 32 cryptographically secure random bytes, and tokens are strictly validated on all operations. - High Reliability & Authenticated Email Delivery: System emails (verification codes, alerts) are delivered reliably via Symfony Mailer with authenticated SMTP connections, replacing legacy mail transports. Atomic database transactions with row-level locking ensure zero data corruption.
- Web Dashboard & Account Management: You can now sign in to your account directly via the web portal (notefox.eu/my) to manage your profile, security preferences (such as two-step verification), password, and sync history. Looking forward, this web interface lays the groundwork for even more capabilities—such as the possibility to access and view your notes on the fly directly from any browser.
- Live Systems Status & Health Detection Page: A new dedicated page (Services Status & Health Detection) is available in the Help section to test and monitor the operational state of all backend services live in real time (API gateway, database DBMS, sync engine, DEK/KEK encryption schemas, SMTP email delivery, security rate limits, and server clock synchronization).
What Happens to Existing (v1) Users?
If you already have a Notefox Account created with version 1, you do not need to do anything. The transition is designed to be completely seamless and risk-free:
- No Interruption & Full Backward Compatibility: The legacy v1 API remains online and operational. If your browser extension is on an older release, it will continue to sync your notes exactly as before without any changes.
- Zero Data Loss: All your existing notes, accounts, and history are preserved intact. No notes are deleted, altered, or wiped during the upgrade.
- Transparent Automatic Migration: When you log in or sync using a v2-compatible client, your account is seamlessly and automatically upgraded in the background. A dedicated Data Encryption Key is created, your latest notes are assigned to the Notefox service snapshot, and updated security measures are activated without requiring any manual export/import steps.
- Same Credentials: Your existing email and password continue to work normally.
- Safe Password Updates: Once upgraded, you can change your password at any time without worrying about older notes becoming unreadable.
Summary of Key Differences
| Feature | Legacy Account (v1) | Sav Account (v2) |
|---|---|---|
| Supported Services | Notefox only | Multi-service (Notefox + future extensions) |
| Sync Mechanism | Last-write-wins (sensitive to clock drift) | Snapshot + Revision counter with conflict detection (409) |
| Password Change | Re-encrypts limited rows | Re-wraps Data Encryption Key (all notes remain accessible) |
| 2FA / Login OTP | Fixed / non-configurable | Configurable per user, with expiry and attempt limits |
| Brute-Force Protection | None | Granular rate limiting across all endpoints |
| Web Management | None (managed only via the extension) | Web dashboard (/my/) + future on-the-fly notes access |
| Password Security | SHA-512 | Modern secure hash (Argon2id / Bcrypt) |
| Live Systems Status Check | None | Dedicated live health detection page (/help/status/) |
Frequently Asked Questions
Do I have to register a new account?
No. Your existing Notefox Account works directly with the new v2 system.
Will I lose my notes when my extension updates?
No. Your notes are securely preserved on the server and will automatically synchronize with the new version. However, keeping a regular local backup via the Import & Export feature is always recommended as a good practice.
Can I manage my account or view my notes from the web?
Yes, you can log in to your account at notefox.eu/my from any web browser to manage your profile, security settings (like 2FA), change your password, or download sync history. In the future, we also plan to allow accessing and viewing your notes on the fly directly from the web portal.
What if I use Notefox on multiple devices with different versions?
The v1 and v2 APIs are designed to coexist safely. A v1 client and a v2 client can both communicate with the sync infrastructure during the transitional period.