Obsidian Stats logoObsidian Stats

StoneGate

by Abdulrahman Agiba | xsiphr
5
4
3
2
1
Score: 51/100
Install Code

Description

A secure lock screen plugin for Obsidian that protects your vault and individual folders with passwords. Supports per-path passwords, idle timeout

Reviews

No reviews yet.

Stats

5
stars
1,055
downloads
0
forks
119
days
20
days
58
days
0
total PRs
0
open PRs
0
closed PRs
0
merged PRs
0
total issues
0
open issues
0
closed issues
72
commits

Latest Version

2.1.1
2 months ago

Changelog

2.1.1

🔥 New

  • Support for locking individual files, not just folders. The existing protected-paths picker now lets you search and select files as well as folders, with icons to distinguish vault, folder, and file entries.
  • Keyboard navigation (arrow keys and Enter) in the path picker's autocomplete list.
  • Adjustable background blur amount for the lock screen, from 2px to 10px, under Appearance settings.

Fixed

  • Settings panel could become unresponsive (requiring an Obsidian restart) after certain lock/unlock sequences.
  • The password field could fail to accept input immediately after returning focus to the Obsidian window in some cases.
  • The lock screen could immediately reappear right after a correct unlock, in vaults with multiple protected paths or short idle timeouts.
  • The lock screen could appear with a noticeable delay on startup, briefly exposing vault content.
  • Keyboard shortcuts (including Obsidian commands such as switching vaults, and browser developer tools shortcuts) no longer work while the lock screen is active.
  • Searching for a path starting with a leading slash (e.g. "/00") now matches correctly.

Changed

  • The password visibility (eye) icon is now embedded within the input field's border instead of floating over it.
  • Password hint fields are now shown directly under the per-path password controls.
  • The Appearance section has been moved to the bottom of the settings tab.
  • Clarified the description of "Lock when Obsidian loses focus" to note that opening another app, including screenshot tools, counts as losing focus.

Internal

  • Refactored the plugin's internal file structure for maintainability: split the previous god-class LockManager into separate lock/idle/ghost-mode managers, and split the large settings.ts file into focused modal and settings-tab files. This is not user-facing but makes future updates safer and faster to ship.
See all version on GitHub

README file from

Github

StoneGate protects your Obsidian vault and individual folders with password authentication, idle timeouts, brute-force lockouts, and an optional stealth mode that hides protected folders entirely.

Installation

From Community Plugins (recommended)

  1. Open Obsidian's Settings → Community plugins.
  2. Make sure Restricted mode is turned off.
  3. Click Browse and search for "StoneGate".
  4. Click Install, then Enable the plugin.

Manual installation

  1. Download main.js, manifest.json, and styles.css from the latest release.
  2. Create a folder named stonegate inside your vault's .obsidian/plugins/ directory.
  3. Copy the three downloaded files into that folder.
  4. Reload Obsidian and enable StoneGate from Settings → Community plugins.

Features

Vault & Folder Protection Lock your entire vault or specific sensitive folders, each with its own password.

Idle Timeout Automatically re-lock a path after a configurable period of inactivity.

Persistent Lockout Blocks further attempts for a cooldown period after repeated failed passwords.

Emergency Recovery Generate a one-time recovery code to regain access if you forget your password.

Ghost Mode Hide protected folders from the File Explorer entirely until unlocked.

Custom Backgrounds Set a custom lock screen background from a URL or a file in your vault.

Configuration

  • Master Password — set in the plugin's settings tab to enable base vault protection.
  • Per-folder passwords — add a protected path and give it its own password, independent of the master password.
  • Recovery Code — generate under "Recovery Options." Keep this code offline; it's the only way back in if you forget your password.
  • Ghost Mode — when enabled on a path, that folder disappears from the File Explorer while locked. Reach it via the Command Palette (StoneGate: Unlock hidden/locked path).

Hotkeys

Configure these under Settings → Hotkeys:

  • Lock vault now — manually trigger the lock screen.
  • Lock current folder — lock just the folder containing the active file.
  • Unlock hidden/locked path — open the menu to find and unlock a protected or hidden path.

Security Practices

  • Hashing — passwords and recovery codes are hashed with PBKDF2 (SHA-256, 200,000 iterations) via the Web Crypto API, each with a unique random salt.
  • Local only — all secrets stay on your device. Nothing is transmitted to an external server.
  • Defense in depth — for sensitive vaults, pair StoneGate with system-level encryption (e.g. Cryptomator) rather than relying on it alone.

License

Distributed under the MIT License. See LICENSE for more information.

Sponsors