Release Notes

If you find this plugin useful please support the ongoing maintenance and development of it by staring ⭐ this repo and buying me a coffee ☕ or consider sponsoring ❤️ me.

Thank you for your support 😊

Please report any bugs or features requests here.

The full change log can be found on the releases page.

v3.1.1

Improvements

Added persistent visibility controls for each ribbon icon, including delayed plugin startup. Hidden icons leave commands available (#220).
Expanded setup, password-provider, recovery, and encryption/security documentation.
Updated password-dialog styling to follow Obsidian community CSS guidelines.

Bug Fixes

Preserved cursor selection and scroll position when switching whole encrypted notes between Editing and Reading views (#236).
Allowed Enter in an empty optional password hint field to submit whole-note and inline encryption dialogs. Enter still advances through the password fields to the hint, where it can be entered or explicitly skipped (#221).

v3.1.0

New Features

Added an opt-in Obsidian Keychain password provider for whole-note and inline encryption, with Obsidian’s native secret selector. Only the secret ID is stored in plugin settings; configure the secret on each device.
Keychain passwords are used for decryption when available, with manual entry as a fallback. Manual passwords never overwrite the shared secret.

Improvements

Explicit encryption now always shows a password dialog for new notes, note conversions, and inline text across all password providers. The provider password is prefilled and can be overridden, with optional confirmation and hints. Saving an already unlocked note does not prompt again.
Clarified password-provider settings and Keychain behavior. Changing a note or inline block’s password affects only that content; changing a Keychain secret does not update existing encrypted content. Keep old passwords for existing notes and backups.

v3.0.2

Improvements

Password dialogs now use Obsidian’s native title area, shorter labels, and Encrypt/Decrypt action buttons, with tighter spacing on mobile.
Made password preview buttons compact on mobile, leaving more room for password and confirmation inputs.

Bug Fixes

Improved whole-note and inline password dialogs on mobile with top positioning, constrained height, and scrollable fields so controls remain reachable when the keyboard is open. Verified on Android; iOS device testing remains pending.

v3.0.1

Compatibility

Raised the minimum supported Obsidian version to 1.13.0.

Improvements

Added a local release validation command and optional desktop smoke checks in a disposable vault, including heading navigation in Reading view and Live Preview.
Updated the Obsidian SDK and development dependencies, including security fixes.
Added searchable settings for password remembering and inline encryption.
Added installation and basic usage instructions to the README, and documented expected standalone CLI review warnings.
External password files support vault-relative paths (including ../) on all platforms subject to filesystem permissions, and absolute paths on desktop.

Bug Fixes

Fixed heading-link navigation in unlocked whole-note encrypted files (#214), using view-local heading metadata and Obsidian navigation.
Prevented stale asynchronous file loads and decryptions from overwriting newer encrypted-note contents.
Read external password files directly through filesystem APIs or the vault adapter, preserving file contents and falling back past missing, inaccessible, or empty files.
Stopped detaching encrypted-note tabs during plugin unload; the explicit lock-and-close command remains available.
Added explicit asynchronous error handling to the standalone recovery CLI.

v3.0.0

Update Meld Encrypt on every device before saving encrypted content. Earlier plugin versions cannot decrypt the new v3 format. Keep a backup before upgrading.

Changes since v2.4.5.

Compatibility

Requires Obsidian 1.1.13 or later.
New encryption uses the v3 format. Existing encrypted notes remain readable, but saving a legacy whole note upgrades it to v3; inline blocks upgrade when edited and saved through the decryption dialog. Update the plugin on all devices before saving: earlier plugin versions cannot decrypt v3 content.
Command IDs have changed to follow Obsidian plugin conventions. Existing custom hotkeys may need to be reassigned.

New Features

Added v3 encryption for whole notes and inline text, using PBKDF2-HMAC-SHA512 with 220,000 iterations and AES-256-GCM. Encryption parameters are stored with the ciphertext and authenticated; inline text uses compact gamma (γ) markers.
Added v3 support to the mdenc CLI and offline decryptor while retaining support for released legacy formats.

Improvements

Updated dependencies, TypeScript checks, and linting to address Obsidian community review requirements.
Added automated coverage for encryption formats, password caching, inline text analysis, note saving and conversion, password changes, and recovery tools.
Consolidated password forms, inline encryption writing, encrypted-note context-menu actions, CLI block scanning and password attempts, and byte/Base64 conversions into shared helpers.
Added regression coverage for password-dialog cancellation and focus, preservation of inline hints and marker visibility, legacy Base64 compatibility, large payloads, and CLI recovery of marker-like plaintext.
Release builds now produce a real ZIP archive and report packaging failures.
Resolved remaining lint findings, including asynchronous inline-dialog error handling and popout-aware settings detection.
Development builds now write to the test vault under tests/test-vault.
Updated documentation for inline commands and ribbon buttons, plaintext and password storage, external password file setup, running mdenc from the vault directory, and release validation and artifact paths.

Bug Fixes

Fixed undo wiping decrypted whole-note contents (#241, #242).
Fixed overlapping saves during note unloading that could write plaintext to an encrypted file. Closing a note now waits for its save to succeed.
Preserved unsaved edits when encryption or disk writes fail, including edits made while a save is running.
Fixed note conversion to wait for saves and view unloading before reading the final contents, retain edits made during password entry, and prevent simultaneous conversions of the same file.
Password changes now update the active password and session cache only after a successful save, and reject changes if the note is no longer available.
Creating an encrypted note now prompts for a password when an external password file is unavailable or empty, instead of using an empty password.
Fixed inconsistent password cache keys between file and path lookups, so whole-note and inline operations share and clear remembered passwords consistently.
Made decrypted inline text in reading view read-only, with a Copy action. Use the editor’s Decrypt command to edit and save changes.
Rejected reserved encryption markers in inline password hints to prevent unreadable encrypted blocks.
Hardened encrypted file and v3 payload validation to reject malformed data and unsupported encryption parameters.
Fixed mdenc detection of supported inline markers and testing of every encrypted block. The test and decrypt commands now return a nonzero exit status when any decryption fails.
Fixed CLI recovery altering literal plaintext containing replacement sequences such as $&.
Fixed mdenc recovery rescanning decrypted text as ciphertext. Literal 🔐 markers and encrypted-looking text inside recovered plaintext are now preserved, and a failed inline block leaves that note’s existing output untouched.
Fixed password dialogs treating Enter in the confirmation field as final acceptance before the hint was submitted. Cancelling at that stage now discards the result; remembered passwords no longer focus a hidden confirmation field when confirmation is disabled.
Fixed large payloads exceeding the function-argument limit in the obsolete encryption writer by using a shared chunked Base64 encoder. Legacy decoding tolerance and strict v3 validation are preserved.
Fixed offline decryptor format detection and handling of invalid encrypted input.

v2.4.5

Improvements

Documentation by @kalarp in #209
Updated libs

New Features

Added command palette option to Lock and Close all open encrypted notes #110

Bug Fixes

Fixed encrypted wholenote status icon showing on normal views
Fixed slash commands not working if expand selection to whole line option is enabled #212

v2.4.4

Improvements

Added guards to check we aren’t encrypting selections containing already encrypted text in inplace notes

Bug Fixes

Fixed Can’t decrypt inplace notes #206

v2.5.3

Improvements

Updated libs.

Bug Fixes

Fixed an issue where toolbar icons were duplicated: #207.

v2.5.2

Bug Fixes

Fixed an issue where the note view would move offscreen when editing whole notes on Android: #205.

v2.4.1

Improvements

Added new settings to adjust scan range per user requirements.

Bug Fixes

Fixed the tab order: #173.
Fixed an issue where switching view modes could result in content loss (feat-whole-note): #187.
Fixed an issue where decryption did not work for large text notes. (feat-in-place): #188.
Fixed and issue with missing view actions (feat-whole-note): #192.

v2.4.0

Improvements

Rewrote the encrypted note editor to be based on the Obsidian note editor. Fixed the following issues: #142, #145, #148, #152, #153, #154, #159.
Built a standalone CLI script (mdenc) to work with encrypted notes independently to Obsidian. See #105.
The icon has been changed for consistency.

New Features

Added an External File option to store passwords in external files. See #162.
Added In place editing by @naturecodevoid. See #166.

Bug Fixes

Fixed the issue no. #183.

v2.3.7

Improvements

Clarified the Remember By description in settings: (#146, #149).

New Features

Added a setting to remember session passwords by vault: (#146, #149).
Added a command to clear session password cache.
Added a ribbon icon for Encrypt/Decrypt command: (#157).

Bug Fixes

Fixed an issue with the missing lock indicator in reading view: (#156).
Some other bug fixes.

v2.3.6

New Features

Added a New Encrypted Note option to the folder context menu: (#106).
You can now add encrypted text directly to the note: (#143).

Bug Fixes

Fixed internal links not working in encrypted notes: (#144).

v2.3.5

Bug Fixes

Fixed a regression introduced in #132, which led to malfunctions of other plugins: (#136).

v2.3.4

Improvements

Improved indenting when editing encrypted whole-notes: (#108).

Bug Fixes

Fixed incorrect rendering of markdown for in-place encrypted notes in reading view: (#132).

v2.3.3

Bug Fixes

Fixed an issue where consecutive in-place markers did not render correctly in reading view: (#102).
Fixed an issue where bottom text is hidden when editing encrypted whole-notes: (#124).

v2.3.2

Improvements

Added a key-bindable command to toggle reading view for encrypted notes: (#116).
The .mdenc file extension is now used for encrypted notes: (#117).

v2.3.1

Bug Fixes

Fixed an issue where encrypting or decrypting notes did not update links: (#118)

v2.3.0

Improvements

The ribbon icon has been changed.
Code refactoring and cleanup.

New Features

Added encryption and decryption features for .md and .encrypted notes: #68 (via file context menu, ribbon icon or command palette; helps with the following issues: #91, #103, #108, #114).

Bug Fixes

Fixed an issue with the double blank line: #107.
Fixed an issue with the offline decryptor tool: #111 (found in /tools/decrypt.html).

v2.2.0

Improvements

Stronger encryption (thanks @brycx).

New Features

Added the ability to select text in reading view: #92.

Bug Fixes

Fixed an issue where in-place encrypted text within tables caused table removal in the reading view: #93.

v2.1.3

Improvements

Follow readable line length and show inline title settings in encrypted notes.
Updated layout and styling.

New Features

Added spell check support when editing notes.

v2.1.2

New Features

Added a clickable inline encrypted text marker in reading view.

v2.1.1

Improvements

Limited support for markdown in .encrypted notes.

New Features

Added a new setting to select the default view when opening .encrypted notes (Source or Reading).

v2.1.0

Improvements

Changed the wording for the Remember Password Timeout setting in Settings.
Code refactoring.

New Features

Automatically decrypts notes if the password is remembered.
Clears remembered passwords when re-locking a file.
When changing a password, remembers it if Remember Password is active.
Added a new setting to remember passwords by parent folder path.

v2.0.5

Bug Fixes

Fixed an issue with creating encrypted notes on mobile devices.

v2.0.4

Bug Fixes

Fixed an issue where a password was remembered even when the Remember Password setting was unchecked.

v2.0.3

New Features

Added a password session cache for shared password management.
Enabled password remembering for whole note encryption.
Added a password peek button to reveal hidden passwords.

v2.0.2

Due to popular demand, the encrypt in-place functionality is no longer scheduled for removal 🙄🥳.

Improvements

Code refactoring.
UI cleanup.
Updated usage docs.

v2.0.1

New Features

Added Change Password and Lock actions to the note tab context menu: (#49).

Bug Fixes

Fixed an issue with the encryption of large files: (#41).

v2.0.0

To make encrypted notes more resilient, starting from v2.0.0, the plugin introduces a new .encrypted note.

The advantages of this new approach are:

Your note contents are always encrypted on disk.
Encrypted bytes are hidden away from the user making it difficult to accidentally corrupt the encryption and thus making the note un-decryptable.
Encrypted notes are easily identifiable by their ‘.encrypted’ file extension.
Better workflow for editing encrypted notes.