Using Joplin Notes for the Training

Using Joplin Notes for the Training

We recommend using Joplin Notes as part of this training.

https://joplinapp.org

The Joplin Markdown format is specifically used for CAR Profiles, which form your CARS Workbook. However, Joplin can also be used for:

  • Digital Life User Manual
  • Digital Life Logbook

Privacy is a Journey – Start Where You Are

Most people beginning this course currently have little to no privacy. Our approach is about small, incremental improvements rather than overwhelming changes all at once.

While we provide secure storage options below, you do not need to implement them immediately. If you’re not yet comfortable with these advanced methods, simply start by storing your notes locally, this is easy and requires no setup. Later, as you gain confidence, you can migrate your notes to more secure storage.

If you’re not ready for secure digital storage, pen and paper are also valid options. The key is to start recording your notes – you can refine your storage methods as you progress toward full privacy.

Introduction to Joplin

Joplin is a free and open-source (FOSS) note-taking application that supports end-to-end encryption (E2EE), Markdown-based notes, and multi-platform synchronization. Available for Windows, Mac, Linux, Android, and iOS, Joplin is a powerful alternative to proprietary note-taking services, giving users full control over their data.

Joplin allows notes to be stored offline or synchronized through private WebDAV servers, Nextcloud, and other cloud services.

Understanding Joplin’s Markdown Format

Joplin uses a specific form of Markdown called Joplin-Flavored Markdown (JFM).

What is Joplin-Flavored Markdown (JFM)?

JFM is a lightweight markup language based on CommonMark Markdown, but with additional features specific to Joplin, such as:
✅ Checkboxes for to-do lists
✅ Internal note linking
✅ Support for math equations (KaTeX)
✅ Code blocks with syntax highlighting

Why Markdown?

✅ Plain text format—lightweight, portable, and can be read by any text editor.
✅ Easy to back up and store securely on removable media.
✅ More private than proprietary formats—no hidden metadata.

Supported File Formats in Joplin

Import Formats

Joplin can import:

  • Markdown (.md) – Default Joplin format.
  • JEX (.jex) – Joplin’s archive format (preserves metadata and structure).
  • Evernote (.enex) – Import Evernote notes.
  • Plain Text (.txt) – Basic text import.
  • JSON (.json) – For migrating structured data.

Export Formats

Joplin allows exporting notes in:

  • Markdown (.md) – Portable and human-readable.
  • JEX (.jex) – Full backup of all notes.
  • PDF (.pdf) – For read-only sharing.
  • HTML (.html) – Useful for viewing in a web browser.
  • Plain Text (.txt) – Simple, unformatted text.

Safe Usage of Joplin

Joplin supports a range of features beyond simple text notes, such as:

  • Web content imports (clipping webpages).
  • Embedding images, videos, and files.
  • Running scripts within notes (via plugins).

Security Risks of Advanced Features

While Joplin-Flavored Markdown (.md) is 100% safe, importing files, scripts, or external content can introduce security risks, such as:
❌ Malicious scripts running inside Joplin (if plugins are enabled).
❌ Untrusted images and attachments that may contain tracking metadata.
❌ Accidental sync of sensitive web content to cloud storage.

Recommended Best Practices

✅ For the highest security, stick to basic Markdown (.md) notes.
✅ Do not import unknown web content unless you trust the source.
✅ Disable plugins and external scripts unless you are an advanced user.
✅ Use only trusted cloud providers with end-to-end encryption if syncing.

🔹 If you are not confident in handling external files or features, stay with generic text-based notes until you understand the risks.

Using Joplin on Removable Media

For those who want to keep sensitive notes off their main system, using Joplin with a USB drive or external storage is a highly secure method.

Option 1: Separately Store Sensitive Notes on Removable Media

Instead of running Joplin directly from a USB, sensitive notes can be stored as Markdown (.md) or JEX backups on removable media.

Workflow

  1. Store sensitive notes on a USB or encrypted external storage.
  2. Import the note into Joplin when needed (Markdown or JEX).
  3. Edit and save the updated note back to the USB.
  4. Delete the imported note from Joplin after use.
  5. Empty Joplin’s trash to remove any traces.

✅ Prevents sensitive data from lingering on the system.
✅ Works across Windows, Mac, Linux, and mobile.
✅ Can be combined with encrypted storage solutions (e.g., VeraCrypt, LUKS, BitLocker).

Windows: Running Joplin on a USB Drive

Windows users have two options for using Joplin with removable media.

🔹 Option 1: Joplin Portable (Recommended)

Runs Joplin directly from a USB without installation.

Setup Steps

  1. Download Joplin Portable from Joplin’s GitHub Releases.
  2. Extract it to a USB drive (e.g., E:\JoplinPortable).
  3. Run JoplinPortable.exe from the USB.

✅ No files stored on the host system.
❌ Windows-only.

🔹 Option 2: Storing the Joplin Profile on a USB Drive

For users who want Joplin installed but keep notes on USB.

Setup Steps

  1. Install Joplin on the computer.
  2. Change the Profile Directory to a folder on the USB (e.g., E:\JoplinProfile).
  3. Restart Joplin.

Note: Drive letters (E:, F:, etc.) may change if other USBs are connected. To prevent this, manually assign a permanent letter (J: or X:) in Windows Disk Management.

✅ Works on any Windows machine with Joplin installed.

Mac: Running Joplin with a USB Drive

Mac users cannot use a portable version but can store notes externally.

🔹 Setup Steps

  1. Plug in your USB and open Finder.
  2. Copy the USB path (e.g., /Volumes/JoplinUSB).
  3. Set Profile Directory to /Volumes/JoplinUSB/JoplinProfile in Joplin Preferences.
  4. Restart Joplin.

✅ No need for Terminal commands.
❌ The USB must always be mounted as /Volumes/JoplinUSB.

Mobile-Only Users: Syncing to Secure Cloud Storage

Removable media is not supported on mobile. The only way to use Joplin securely on mobile is via encrypted cloud storage.

ServiceSupports WebDAVEnd-to-End Encryption (E2EE)
Nextcloud✅ Yes✅ Yes (manual setup)
Koofr✅ Yes🚫 No (use Joplin’s E2EE)
Tresorit✅ Yes✅ Yes (default)

Secure Cloud Workflow

  1. Enable Joplin’s Encryption (Settings → Encryption).
  2. Sync with WebDAV (Nextcloud, Koofr, or Tresorit).
  3. Disable auto-sync after downloading needed notes.
  4. Clear local storage after use.

Joplin’s Built-In End-to-End Encryption (E2EE)

To protect notes when syncing, Joplin’s encryption should always be enabled.

🔹 Steps to Enable:

  1. Go to Settings → Encryption.
  2. Enable encryption and set a strong password.
  3. Store your Master Key securely (cannot be recovered if lost).

✅ Encrypts notes before they reach the cloud.
✅ Highly recommended for mobile-only users.

Final Thoughts

Joplin provides secure note-taking options across multiple platforms. By following the removable media strategies, cloud sync methods, and encryption recommendations, you can maximize privacy and security