The Vault Encrypt plugin encrypts every file in your vault and masks its structure to provide strong privacy with minimal manual handling. It replaces filenames with random identifiers, removes folder hierarchies, and pads file sizes so the original layout becomes impossible to infer. Encryption and decryption run through a simple lock icon or command, and the vault stays in its chosen state even after the app closes. Under the hood, it uses AES-256-GCM with PBKDF2 and HKDF, with configurable iteration counts for users who want higher security at the cost of speed.