Obsidian plugins with #vault-security#

The Vault Syncryption plugin syncs notes, attachments, settings, themes and plugins through a server you host yourself. File contents, names and folder paths are encrypted on each device before upload. New devices need approval from an existing device, while a recovery key restores access if every device is lost. Changes to different parts of a note merge automatically, with both versions preserved when the same lines conflict. File history supports previewing and restoring earlier versions. Regular devices keep a full local copy and queue changes while offline. Remote only devices keep note content encrypted locally and support remote locking and wiping, but their configuration folder remains readable. A status window tracks pending uploads and device keys, and sync can be paused. The plugin requires a Vault Syncryption server and Obsidian 1.13 or later.

The Vault Encrypt plugin encrypts every file in your vault and masks its structure to provide strong privacy with minimal manual handling. It replaces filenames with random identifiers, removes folder hierarchies, and pads file sizes so the original layout becomes impossible to infer. Encryption and decryption run through a simple lock icon or command, and the vault stays in its chosen state even after the app closes. Under the hood, it uses AES-256-GCM with PBKDF2 and HKDF, with configurable iteration counts for users who want higher security at the cost of speed.