# How Does Encryption Work Under the Hood

> How does Bear encrypt notes? Learn how Bear encrypts and protects your notes. Bear allows users to encrypt their notes to keep them private. Encrypt notes in Bear.

Source: https://bear.app/faq/how-does-encryption-in-bear-work-under-the-hood/

When the user chooses to encrypt a note, the text of that note is secured via the [Themis](https://github.com/cossacklabs/themis) Open Source library (AES-GCM-256 with ZRTP KDF) with a per note unique encryption key.

The password is stored for biometric authentication using Apple’s [SecureEnclave](https://developer.apple.com/documentation/security/certificate_key_and_trust_services/keys/storing_keys_in_the_secure_enclave?language=objc) through the [Valet](https://github.com/square/Valet) Open Source library.

These are only highlights of the security structure we adopt in Bear. If you want to read an in-depth analysis you can read the [blog post](https://www.cossacklabs.com/blog/end-to-end-encryption-in-bear-app.html) from Cossack Labs, the security firm we have collaborated with to make it all happen.