# Password protect / lock folder / Encryption at rest

**URL:** <https://forum.obsidian.md/t/password-protect-lock-folder-encryption-at-rest/1754>\
**Category:** Feature requests\
**Tags:** valuable\
**Created:** [June 13, 2020, 10:39am UTC](https://forum.obsidian.md/t/password-protect-lock-folder-encryption-at-rest/1754 "2020-06-13T10:39:16Z")\
**Posts on this page:** 20\
**Page:** 5

<div class="post-metadata">

**Author:** ![jtmusky](https://forum.obsidian.md/user_avatar/forum.obsidian.md/jtmusky/32/6588_2.png) [@jtmusky](https://forum.obsidian.md/u/jtmusky)\
**Post date:** [March 3, 2021, 2:50am UTC](https://forum.obsidian.md/t/password-protect-lock-folder-encryption-at-rest/1754/138 "2021-03-03T02:50:25Z")

</div>

Would GPG style encryption work here? Maybe something like how [https://www.passwordstore.org](https://www.passwordstore.org) works?

---

<div class="post-metadata">

**Author:** ![Reese](https://forum.obsidian.md/letter_avatar_proxy/v4/letter/r/91b2a8/32.png) [@Reese](https://forum.obsidian.md/u/Reese)\
**Post date:** [March 3, 2021, 3:14am UTC](https://forum.obsidian.md/t/password-protect-lock-folder-encryption-at-rest/1754/139 "2021-03-03T03:14:53Z")

</div>

There is now a plug-in to encrypt portions of a note within Obsidian. See it here: [GitHub - meld-cp/obsidian-encrypt: Hide secrets in your Obsidian.md vault](https://github.com/meld-cp/obsidian-encrypt) or in the Community Plugins: “Meld Encrypt”

---

<div class="post-metadata">

**Author:** ![jtmusky](https://forum.obsidian.md/user_avatar/forum.obsidian.md/jtmusky/32/6588_2.png) [@jtmusky](https://forum.obsidian.md/u/jtmusky)\
**Post date:** [March 3, 2021, 4:48am UTC](https://forum.obsidian.md/t/password-protect-lock-folder-encryption-at-rest/1754/140 "2021-03-03T04:48:32Z")

</div>

This works great for me! Its nice that the decrypt part shows a popup and keeps the data encrypted.

---

<div class="post-metadata">

**Author:** ![Wxll](https://forum.obsidian.md/user_avatar/forum.obsidian.md/wxll/32/10237_2.png) [@Wxll](https://forum.obsidian.md/u/Wxll)\
**Post date:** [March 4, 2021, 1:40pm UTC](https://forum.obsidian.md/t/password-protect-lock-folder-encryption-at-rest/1754/141 "2021-03-04T13:40:39Z")

</div>

@fourteen

> What would be the best way to encrypt a vault?

I wrote a little Howto here:

> [@HOWTO: OsX & Windows 10 Obsidian with Cryptomator @ Dropbox](https://forum.obsidian.md/t/howto-osx-windows-10-obsidian-with-cryptomator-dropbox/14019):
>
> Goal: To use Obsidian on both Windows10 & OsX using the same Vault that is securely encrypted on a shared Cloud drive between Windows & OsX. Please note, I do not think you should try to use this Simultaneously! After some struggling I can confirm that the following setup works. Using Obsidian@OsX on a Cryptomator encrypted Vault stored on dropbox Using the same encrypted Vault on Dropbox on a Windows 10 machine… However there is one pitfall to check to make Obsidian work on Windows 10 wit…

Might give you some inspiration…  
And obsidian has a service as well for end-2-end encryption which I personally also consider to use as soon as my vault gets more used.

---

<div class="post-metadata">

**Author:** ![Wxll](https://forum.obsidian.md/user_avatar/forum.obsidian.md/wxll/32/10237_2.png) [@Wxll](https://forum.obsidian.md/u/Wxll)\
**Post date:** [March 4, 2021, 1:43pm UTC](https://forum.obsidian.md/t/password-protect-lock-folder-encryption-at-rest/1754/142 "2021-03-04T13:43:57Z")

</div>

Considering encrypting a single page or part of a page it could be consider an infile encryption like they are using with eYaml, example:

> **[GitHub - voxpupuli/hiera-eyaml: A backend for Hiera that provides per-value...](https://github.com/voxpupuli/hiera-eyaml)**
>
> A backend for Hiera that provides per-value asymmetric encryption of sensitive data - GitHub - voxpupuli/hiera-eyaml: A backend for Hiera that provides per-value asymmetric encryption of sensitive ...

---

<div class="post-metadata">

**Author:** ![fourteen](https://forum.obsidian.md/user_avatar/forum.obsidian.md/fourteen/32/5781_2.png) [@fourteen](https://forum.obsidian.md/u/fourteen)\
**Post date:** [March 13, 2021, 12:43pm UTC](https://forum.obsidian.md/t/password-protect-lock-folder-encryption-at-rest/1754/143 "2021-03-13T12:43:46Z")

</div>

> obsidian has a service as well for end-2-end encryption

Wait, really? How do I enable this?

---

<div class="post-metadata">

**Author:** ![ryanjamurphy](https://forum.obsidian.md/user_avatar/forum.obsidian.md/ryanjamurphy/32/334_2.png) [@ryanjamurphy](https://forum.obsidian.md/u/ryanjamurphy)\
**Post date:** [March 13, 2021, 6:09pm UTC](https://forum.obsidian.md/t/password-protect-lock-folder-encryption-at-rest/1754/144 "2021-03-13T18:09:54Z")

</div>

It’s the Obsidian Sync service.

See Sync: [Pricing - Obsidian](https://obsidian.md/pricing)

---

<div class="post-metadata">

**Author:** ![Hydro](https://forum.obsidian.md/letter_avatar_proxy/v4/letter/h/4da419/32.png) [@Hydro](https://forum.obsidian.md/u/Hydro)\
**Post date:** [March 18, 2021, 9:32am UTC](https://forum.obsidian.md/t/password-protect-lock-folder-encryption-at-rest/1754/145 "2021-03-18T09:32:24Z")

</div>

Does someone work with boxcryptor on android phone ? With markor for example ?

---

<div class="post-metadata">

**Author:** ![icebear](https://forum.obsidian.md/user_avatar/forum.obsidian.md/icebear/32/2823_2.png) [@icebear](https://forum.obsidian.md/u/icebear)\
**Post date:** [March 22, 2021, 11:06pm UTC](https://forum.obsidian.md/t/password-protect-lock-folder-encryption-at-rest/1754/146 "2021-03-22T23:06:46Z")

</div>

My impression was Boxcryptor couldn’t do what I needed on Android with Markor. Would be interested to learn otherwise, if you figure it out.

---

<div class="post-metadata">

**Author:** ![asmageddon](https://forum.obsidian.md/letter_avatar_proxy/v4/letter/a/f1d935/32.png) [@asmageddon](https://forum.obsidian.md/u/asmageddon)\
**Post date:** [September 3, 2021, 4:21pm UTC](https://forum.obsidian.md/t/password-protect-lock-folder-encryption-at-rest/1754/147 "2021-09-03T16:21:21Z")

</div>

I would love to selectively encrypt files and folders as well in obsidian in order to encrypt some sensitive information (wouldn’t want to have my bank account number, SSN, etc out in the open)

---

<div class="post-metadata">

**Author:** ![HammyHavoc](https://forum.obsidian.md/user_avatar/forum.obsidian.md/hammyhavoc/32/20428_2.png) [@HammyHavoc](https://forum.obsidian.md/u/HammyHavoc)\
**Post date:** [October 2, 2021, 5:41pm UTC](https://forum.obsidian.md/t/password-protect-lock-folder-encryption-at-rest/1754/148 "2021-10-02T17:41:55Z")

</div>

Yes, selective encryption would be a brilliant addition.

---

<div class="post-metadata">

**Author:** ![WhiteNoise](https://forum.obsidian.md/user_avatar/forum.obsidian.md/whitenoise/32/11_2.png) [@WhiteNoise](https://forum.obsidian.md/u/WhiteNoise)\
**Post date:** [July 1, 2024, 5:54pm UTC](https://forum.obsidian.md/t/password-protect-lock-folder-encryption-at-rest/1754/149 "2024-07-01T17:54:18Z")

</div>

Split this topic on July 1, 2024, 5:54pm UTC

2 posts were merged into an existing topic: [Android app: Add option to create vault in Obsidian’s app-specific directory](https://forum.obsidian.md/t/android-app-add-option-to-create-vault-in-obsidians-app-specific-directory/27971/16)

---

<div class="post-metadata">

**Author:** ![Chita](https://forum.obsidian.md/letter_avatar_proxy/v4/letter/c/edb3f5/32.png) [@Chita](https://forum.obsidian.md/u/Chita)\
**Post date:** [February 9, 2022, 2:17am UTC](https://forum.obsidian.md/t/password-protect-lock-folder-encryption-at-rest/1754/151 "2022-02-09T02:17:52Z")

</div>

I hope we can easily use password to encrypt any file to protect our private info ; the folder could be a good target to encrypt ;

- Add password to folders
- Lock and unlock folders
- Change password of folders
- Remove password of folders

The encrypt file in the disk could be a zip file , that could make it easy to edit without obsidian ,and also easy to implement in different systems.

---

<div class="post-metadata">

**Author:** ![Chita](https://forum.obsidian.md/letter_avatar_proxy/v4/letter/c/edb3f5/32.png) [@Chita](https://forum.obsidian.md/u/Chita)\
**Post date:** [February 9, 2022, 2:34am UTC](https://forum.obsidian.md/t/password-protect-lock-folder-encryption-at-rest/1754/152 "2022-02-09T02:34:49Z")

</div>

The interface example could be [something like Onenote](https://medium.com/mathematicallygifted/secure-your-onenote-on-windows-10-2d143239341b) , that is enough for me .

---

<div class="post-metadata">

**Author:** ![LondoMollari](https://forum.obsidian.md/user_avatar/forum.obsidian.md/londomollari/32/9031_2.png) [@LondoMollari](https://forum.obsidian.md/u/LondoMollari)\
**Post date:** [October 27, 2023, 11:29am UTC](https://forum.obsidian.md/t/password-protect-lock-folder-encryption-at-rest/1754/153 "2023-10-27T11:29:51Z")

</div>

I’d really like to see in-app encryption at rest that functions across platforms. No wonky workarounds, no OS dependant 3rd party solutions, and no snarky responses. Oi vey, the snarky responses! This isn’t a crazy ask, in and of itself, even if it’s not possible for some reason.

Would it be applicable for all possible threat models? Of course not, but it’d add a huge layer of security for most general users, upping the difficulty of malicious decryption from an “open the text file” level.

---

<div class="post-metadata">

**Author:** ![patagonian](https://forum.obsidian.md/letter_avatar_proxy/v4/letter/p/898d66/32.png) [@patagonian](https://forum.obsidian.md/u/patagonian)\
**Post date:** [March 12, 2024, 9:37pm UTC](https://forum.obsidian.md/t/password-protect-lock-folder-encryption-at-rest/1754/154 "2024-03-12T21:37:49Z")

</div>

Personally for me this is the most important functionality that Obsidian is missing.

1- The encryption system should not depend on external plugins, a specific OS or need complex configurations.  
2- Ideally it should work with the biometric systems of smartphones (faceID and fingerprint).  
3- Give the option to encrypt a whole Vault or just a folder/file.

---

<div class="post-metadata">

**Author:** ![Tonda](https://forum.obsidian.md/letter_avatar_proxy/v4/letter/t/9dc877/32.png) [@Tonda](https://forum.obsidian.md/u/Tonda)\
**Post date:** [July 1, 2024, 5:19pm UTC](https://forum.obsidian.md/t/password-protect-lock-folder-encryption-at-rest/1754/155 "2024-07-01T17:19:39Z")

</div>

Is there no progress…?? Will there ever be an encryption function in obsidian? This is shocking to me! Obsidian is a great app and I really would like to trustfully put all my thoughts in its notes, but without ANY encryption any fraudulent app I install by accident can read and steal my most private thoughts too!!

PLEASE developers shed some light on why you didn’t include the feature and if you are planning to do so in the future.

Shure the core problem for Android users is the big fault in the OS, that it’s not possible to properly manage read / write access for folders on OS level.

It seems extremely hazardous to use Obsidian with all the notes in the easily accessible storage… Are you all really doing this?

---

<div class="post-metadata">

**Author:** ![AlanG](https://forum.obsidian.md/user_avatar/forum.obsidian.md/alang/32/55225_2.png) [@AlanG](https://forum.obsidian.md/u/AlanG)\
**Post date:** [July 1, 2024, 5:31pm UTC](https://forum.obsidian.md/t/password-protect-lock-folder-encryption-at-rest/1754/156 "2024-07-01T17:31:49Z")

</div>

> [@Tonda](#):
>
> PLEASE developers shed some light on why you didn’t include the feature and if you are planning to do so in the future

The devs reply about this multiple times in every thread.

It won’t be added because Obsidian is a **plain text** editor. It works on plain text files not encrypted files.

There are many good benefits to this - other applications (including apps on mobile) can interact with the same files. I use Automate on Android to append to log notes multiple times per day, and I couldn’t do that if the notes were encrypted at rest.

There are already plenty of existing methods to encrypt your files which you can use alongside Obsidian to encrypt your vault - [Cryptomator](https://cryptomator.org/) is a great one which has been mentioned in this thread.

Alternatively there are other note taking applications which do encrypt everything at rest - [StandardNotes](https://standardnotes.com/) and [Notesnook](https://notesnook.com/) would be two good examples.

For further reference:

> [@Security Flaw in Obsidian? Global Encryption to MD Files on local](https://forum.obsidian.md/t/security-flaw-in-obsidian-global-encryption-to-md-files-on-local/64002/13):
>
> I am sorry but we don’t see at flaw at all. Obsidian is an app that runs locally on your computer and it is intended that other apps in your computer to potentially access your files. If it is something you do not want, it is upon you to not allow it (veracrypt?, Containerization)

And:

> [@Security Flaw in Obsidian? Global Encryption to MD Files on local](https://forum.obsidian.md/t/security-flaw-in-obsidian-global-encryption-to-md-files-on-local/64002/15):
>
> This is not in the plans, I am sorry.

---

<div class="post-metadata">

**Author:** ![djmike](https://forum.obsidian.md/letter_avatar_proxy/v4/letter/d/9f8e36/32.png) [@djmike](https://forum.obsidian.md/u/djmike)\
**Post date:** [July 31, 2024, 1:54pm UTC](https://forum.obsidian.md/t/password-protect-lock-folder-encryption-at-rest/1754/157 "2024-07-31T13:54:18Z")

</div>

Why not have encryption natively and have the setting to turn it off or on? Users like yourself that have other third-party tools can keep encryption off.

I get there is Cryptomator, but we should have at least Password protection natiely at the folder level. Sometimes your girlfriend is using your laptop while you’re cooking dinneer together, the last thing I want is for her to read my journal notes.

The Password Protection community app works really well, but unfortunately can be turned off in the settings icon. Why not just have a login and password screen to open the app? There’s nothing cumbersome about programming that functionality.

---

<div class="post-metadata">

**Author:** ![WhiteNoise](https://forum.obsidian.md/user_avatar/forum.obsidian.md/whitenoise/32/11_2.png) [@WhiteNoise](https://forum.obsidian.md/u/WhiteNoise)\
**Post date:** [July 31, 2024, 3:26pm UTC](https://forum.obsidian.md/t/password-protect-lock-folder-encryption-at-rest/1754/158 "2024-07-31T15:26:33Z")

</div>

Cryptomator and veracrypt are additional layer of security.

Most modern OSes already offer multi user authentication and data encryption, often with different keys for OS and each user account.

In short, protect your account with a password and create a separate account in your computer for your girlfriend and tell her to use that.

This FR remains open for future consideration.

[Previous page](https://forum.obsidian.md/t/password-protect-lock-folder-encryption-at-rest/1754.md?page=4)

[Next page](https://forum.obsidian.md/t/password-protect-lock-folder-encryption-at-rest/1754.md?page=6)
