I want to prevent someone to spy on my notes... (when computer is lost or stolen) today, if you are on my computer and launch Joplin, you can access all my notes!!! (even if notes are encrypted) gosh!

@bikefly welcome to the forum. This is a topic that comes up very often :slight_smile: [image] bikefly: The security problem of the operating system or application program raised by the author is based on the situation that the computer is not public. Firstly, I would have to disagree with …

@gilluc welcome to the forum. Password protection is mentioned in the Joplin FAQ . Also, if you search this forum you will see that it has been discussed before. A lot! :slight_smile:

Hey there. I'm obsewing discussions for this topic for a some time and just can't get one point. What is the problem with implementing of the asked options? If E2EE is engaged than the notes data is stored locally in encrypted form. Right? Master password is stored locally in some ecrypted form …

[image] Kirr: If E2EE is engaged than the notes data is stored locally in encrypted form. Right? No, that isn't what E2EE is. E2EE only relates to encryption during transit. [image] Kirr: Will Hell come crashing down on Earth if such a naturally expected option becomes a reality? Regard…

[image] Daeraxa: No, that isn't what E2EE is. E2EE only relates to encryption during transit. I have no reason not to trust you. But... what then we see inside *.md files? They contain an encrypted text, not a plain text. Is this some other encryption, which is not involved into E2EE and not …

The .md files aren't your local notes, they are the notes in their transit state so are therefore encrypted. Those files are processed by the Joplin clients, decrypted and their data stored within the local sqlite database. Unless using the local file sync option they shouldn't really be on your s…

Oops... My bad. I was looking into a wrong place. I was looking in [userprofile]\AppData\Roaming\Joplin\ folder which contains preferences and cache data and in the Dropbox sync folder. But "raw" notes and attachments are stored in [userprofile]\.config\joplin-desktop\ which is pretty unexpected o…

Welcome to the forum! [image] Kirr: Will Hell come crashing down on Earth if such a naturally expected option becomes a reality? Making strong (over the top?) statements aren't how things get done in an open source project. If anything, they will turn people off from working with you (althou…

Also, if access to data has to be implemented at the "application-level" then a lot of other data is in the open too. Better to have an account at the "operating system level" and have your disc encrypted in its entirety. If it gets stolen, booting it up wont give access. And when they unplug your…

Thank you Joël. I don't use Joplin anymore. I have to point out that keepass and aegis and ... are asking for password at startup. So they are wrong ??

New feature : request password at startup

Features

Daeraxa 5 January 2022 17:37 3

If you want to secure your local data you might want to have a look at this post

Topic		Replies	Views
Please add built in pin or passsword lock when you launch the joplin app Features	27	4259	25 November 2020
Requesting encryption of local Joplin data (at rest encryption) Features	41	9338	29 March 2021
Is it possible to password lock the application upon opening Support	21	15681	16 May 2021
Questions and Suggestions Features	27	2837	24 January 2020
[RESOLVED] Joplin leaks private info despite end-to-end-encryption enabled Features	47	3277	26 April 2022

New feature : request password at startup

Related topics