Hey everyone, week 5 update.
Good progress this week. Three small PRs merged, and the next user-facing part is starting to take shape.
The attachment indexing PR merged: Mobile, Desktop, Cli: Resolves #15714: Index locked note resources by keshav0479 · Pull Request #15717 · laurent22/joplin · GitHub
Joplin normally tracks attachments by reading links inside a note. For locked notes, the note body is encrypted, so those links are hidden. This change lets Joplin use the attachment IDs saved before locking, so attachments used by locked notes are still tracked safely.
The search/indexing PR merged too: Mobile, Desktop, Cli: Resolves #15737: Exclude locked notes from search indexes by keshav0479 · Pull Request #15756 · laurent22/joplin · GitHub
Locked note bodies are just encrypted text, so they should not show up in search or background indexes. This PR keeps locked notes out of normal search and the newer AI embedding index. If a note was indexed before it was locked, the old indexed data gets removed.
There was also a small mobile fix: Mobile: Fixes #15729: Hide private feature flags by keshav0479 · Pull Request #15730 · laurent22/joplin · GitHub
Henry noticed that private feature flags could still show up in mobile settings. That is fixed now, so mobile matches desktop there.
I also spent time with mrjo on the next UI details. We simplified the plan a bit: instead of an automatic unlock timeout, users will be able to unlock encrypted notes when they need them and lock them again when they are done. There will also be an optional setting to lock again when switching notes.
mrjo also caught a missing backup/export case. The plan now is that locked notes should be decrypted during export and saved as normal notes in the backup, so restoring later does not depend on a lock key that might no longer exist.
Next I’m working on the small backend follow-up for that lock/unlock state, then moving into the desktop lock UI.
More next Friday 
More frequent updates are here: Local note encryption / Keshav