Does Joplin encrypt md files at rest (both locally and remotely), or only in transit?

[anon55947162]

Take a look here :

Is Sync encrypted?

@mkhalila welcome to the forum It all depends on how you have set up sync and Joplin. Simple Summary Sync to cloud storage using http (if your provider’s or your self hosted server only uses http over the Internet you should not use it) Plain text notes are sent unencrypted over the Internet and stored unencrypted on the cloud server. Someone capturing your network traffic could record the packets containing your note data being sent / received in plain text. Technically your cloud storage p…

And metadata is readable in MD files :
id:
parent_id:
created_time:
updated_time:

See more

is_conflict:
latitude:
longitude:
altitude:
author:
source_url:
is_todo:
todo_due:
todo_completed:
source:
source_application:
application_data:
order:
user_created_time:
user_updated_time:
encryption_applied:
markup_language:
is_shared:
type_:

An here :

How can we be sure that you've implemented E2E encryption securely?

Hi, There hasn’t been any comprehensive security audit yet. Yes there are test units for the encryption service and integration tests for E2EE. The crypto is using SJCL at the moment. I followed industry standards as closely as possible and there’s currently no known issues.

I don't know what has been chosen (AES algorithm at 128, 192 or 256 bits) and if it's strong or weak.