Hi. Posting this because I am concerned I might have uncovered a security flaw with the encrypted feature of the app. First, I elected to have my content encrypted according to the app’s settings. I thought I was golden until I ran across a hack. I am running the lastest version of Joplin and macOS…

What about the data I am syncing with Dropbox. Is that encrypted?

Does this vulnerability concern you or others?

Me, no. Others, yes. There have been countless discussions on this forum and on github. I won’t repeat my reasoning. Please search for the topics on this forum.

Okay. I wlll. I did a quick search and didn’t find anything, thus I posted my question. I’ll try another search. Thanks for the quick answer.

This is addressed in this pull request https://github.com/laurent22/joplin/pull/3207

Security Concern - Found Unencrypted Content in .config File

Development

tessus 29 May 2020 21:35 2

local data is not encrypted

Are local notes encrypted?

Topic		Replies	Views
[RESOLVED] Joplin leaks private info despite end-to-end-encryption enabled Features	47	3016	26 April 2022
Resources folder: contains encrypted and un-encryped content: why? Support	7	155	18 September 2025
Images are not encrypted at rest on local device Development	14	764	6 July 2024
Decrypt single .md file Support	27	4422	2 September 2024
Requesting encryption of local Joplin data (at rest encryption) Features	41	9082	29 March 2021

Security Concern - Found Unencrypted Content in .config File

Related topics