When a How-To Geek contributor recently abandoned Google Keep after years of use, the decision wasn’t impulsive—it was a careful pivot toward data ownership, cross-platform support, and robust encryption. The replacement? Joplin, an open-source note-taking app paired with a self-hosted sync server and secured via WireGuard VPN. The move, detailed in a step-by-step guide, shines a light on a quiet but significant shift among Windows users and tech enthusiasts: the desire to break free from big-tech cloud lock-in without sacrificing convenience.

What’s Behind the Switch: Joplin vs. Google Keep

The writer’s primary motivation stemmed from limitations in Google Keep that became dealbreakers over time. Keep excels at quick, lightweight notes—grocery lists, reminders, voice memos—but its simplicity is a double-edged sword. It lacks native Markdown support, robust file attachments, and any offline-first architecture that guarantees access without internet. The notes exist in Google’s ecosystem, synced to the cloud, and while functional, they’re locked into a proprietary format with limited export options.

Joplin addresses these gaps squarely. It’s a free, open-source application (available on Windows, macOS, Linux, Android, and iOS) that treats Markdown as its native language. Notes can include images, PDFs, and other files, all organized into notebooks with tags. The killer feature, however, is its sync engine: Joplin can connect to various backends—Nextcloud, Dropbox, OneDrive, or its own self-hosted server—with end-to-end encryption. That means even if someone gains access to the sync target, notes remain unreadable.

The How-To Geek guide details how the writer leveraged Joplin’s self-hosting option. He deployed the Joplin Server software on a VPS (a Hetzner cloud instance), configured it with Docker, and locked remote access behind a WireGuard VPN tunnel. The result: notes sync seamlessly across a Windows desktop, an Android phone, and a Linux laptop, with the encryption and the server fully under his control.

What Self-Hosting Joplin Means for Everyday Users

The practical impact of this migration depends on who you are. For the average home user who relies on Google Keep’s dead-simple interface, Joplin presents a steeper learning curve. Setting up a self-hosted server and WireGuard is not plug-and-play; it requires comfort with Docker, command lines, and basic networking concepts. However, Joplin has a one-click installer for Windows, and you don’t have to self-host: you can start syncing with Dropbox or OneDrive in minutes, still with encryption. The self-hosted path appeals to those who want absolute control and are willing to invest a few hours.

Power users—developers, writers, researchers—will immediately see the benefits. The Markdown editor, extensible via plugins, supports to-do lists, math formulas, code blocks, and even a web clipper browser extension. Because notes are plaintext files, they’re future-proof: no vendor lock-in, readable by any text editor decades from now. The encryption is a must for confidential journals, project notes, or sensitive snippets. And once the infrastructure is in place, the day-to-day experience feels smooth: Joplin’s apps on Windows and Android are polished and sync quickly.

For IT professionals and system administrators, Joplin’s self-hosting model is a familiar pattern. Dockerized Joplin Server runs on any Linux box, consuming minimal resources. Pairing it with WireGuard creates a private overlay network: only devices with the WireGuard profile can reach the server, eliminating exposure to the public internet. This stacks encryption—Joplin’s end-to-end encryption secures the data at rest and in transit, while WireGuard adds a network-layer shield. The combo is a viable option for small businesses or families wanting a shared, secure note system without monthly SaaS fees.

There are trade-offs. Google Keep’s strength is collaborative editing and Google ecosystem integration. Joplin lacks real-time collaboration and isn’t as deeply woven into Android or Google Workspace. Its mobile app, while functional, can feel less polished than Keep’s beautifully minimal design. But if privacy and control outweigh convenience, Joplin is the clear winner.

How We Got Here: The Note-Taking App Evolution

The move from Google Keep to Joplin didn’t happen in a vacuum. It’s the latest chapter in a decades-long saga of note-taking tools. In the early 2000s, Microsoft OneNote dominated, tying users to the Office suite. Then came Evernote, which pioneered cross-platform sync but later struggled with pricing and privacy concerns. Google Keep arrived in 2013 as a lightweight, sticky-note-style app, capitalizing on deep Google integration. Meanwhile, Apple Notes evolved into a capable but walled-garden option.

A turning point arrived with the open-source wave and the rise of Markdown as a universal format. Tools like Simplenote, Standard Notes, and eventually Joplin (launched in 2017) offered alternatives that respected user autonomy. When Google announced broader data-mining policies and subscription fatigue set in for services like Evernote, tech-savvy users began seeking self-hosted solutions. The proliferation of cheap VPS hosting, Docker, and easy VPN setups like WireGuard lowered the barrier. Now, anyone can run a personal cloud for notes, photos, or documents.

Joplin’s creator, Laurent Cozic, deliberately designed the app to avoid vendor lock-in: the desktop app can export notebooks as raw Markdown or HTML. The sync protocol is open and documented, so third-party clients can be built. The encryption, based on standard algorithms, gives users genuine peace of mind. This philosophy resonates with Windows users who remember the pain of migrating from OneNote’s proprietary .one files.

Step by Step: Migrating from Google Keep to Joplin (Securely)

For those inspired to make the switch, the How-To Geek guide provides a detailed roadmap. Here’s a condensed version, adapted with practical Windows-centric steps where relevant.

1. Export Your Google Keep Data

Google lets you download all Keep notes via Google Takeout. Head to takeout.google.com, deselect everything except Keep, and export as JSON. You’ll get a zip file with your notes. Keep’s checklist items and labels will come through, but some formatting may not translate perfectly—plan for a bit of manual cleanup.

2. Set Up Joplin Desktop

Download and install Joplin for Windows from joplinapp.org. The app includes an import function that can directly pull from Google Takeout’s JSON files. During import, Joplin maps Keep notes to Markdown, preserving checkboxes and basic structure. You’ll then reorganize using notebooks and tags.

3. Choose Your Sync Target

You have three main options, in increasing order of complexity:
- Joplin Cloud (Paid): Easiest; you create an account and log in. No server to maintain, and it’s still encrypted.
- Existing cloud storage: Point Joplin to a folder in Dropbox, OneDrive, or Nextcloud. The app uploads encrypted blobs. This works well but relies on a third-party.
- Self-hosted Joplin Server (free, via Docker): The most private. You run the server software on a machine you control—a home PC, Raspberry Pi, or a VPS.

The How-To Geek writer opted for self-hosting on a Hetzner VPS, using Docker Compose to spin up Joplin Server with a PostgreSQL database. The server is accessed only over the WireGuard VPN tunnel.

4. Deploy Joplin Server and WireGuard (Self-Hosted Path)

If you go the self-hosted route, you’ll need:
- A Linux machine (local or cloud).
- Docker and Docker Compose installed.
- A domain name (optional, but in the guide it’s used with a self-signed certificate).

Typical steps:
- Create a docker-compose.yml for Joplin Server, specifying environment variables for the database, admin credentials, and an application URL.
- Run docker compose up -d.
- Install WireGuard on the server and generate keys. Create a configuration profile for each client device.
- On the Windows client, install the official WireGuard app, import the profile, and activate the tunnel. The Joplin desktop app then connects to the server via its private VPN IP address.

The guide emphasizes using a firewall to restrict access to only WireGuard peers, and enabling HTTPS with a self-signed certificate for end-to-end encryption in transit.

5. Connect Joplin Mobile Clients

For Android, install Joplin from the Play Store or F-Droid, import the WireGuard profile, and configure sync to point at the server’s private address. Encryption ensures that even if the server is compromised, your notes are unreadable without the master password (which never leaves your device).

6. Maintain and Backup

Periodically back up the server’s PostgreSQL database and the Joplin config. Because notes are synced to every device, a full client export is also a good insurance policy.

For those intimidated by Docker and WireGuard, simpler alternatives like using Tailscale (which handles the VPN mesh) or the built-in network mode in Joplin Server’s latest versions can reduce friction. The How-To Geek piece notes that Joplin is working on an official “Joplin Server with WireGuard” easy setup, though it’s not yet released.

What to Watch Next

Joplin’s development is active, with a public roadmap that includes team collaboration features, a revamped mobile UI, and deeper plugin capabilities. The self-hosting movement shows no signs of slowing: projects like Nextcloud and Home Assistant have demonstrated that ordinary users are willing to invest time for digital independence.

For Windows users, the lesson is clear: you don’t have to settle for a note-taking app that harvests your data or locks you in. The combination of Joplin and WireGuard, while not trivial, is a proven template. As more turnkey solutions emerge (think one-click deployments on platforms like Cloudron or YunoHost), the barrier will continue to fall. Keep an eye on how Microsoft’s integration of AI into OneNote and Google’s moves with Keep might push privacy-conscious users even faster toward open-source alternatives.