52
Selfhostable notes app that encrypts the files on Disk? (lemmy.world)
submitted 2 years ago* (last edited 2 years ago) by to c/selfhosted@lemmy.world
26 comments fedilink hide all child comments
 

Hey everyone! :)

I am currently looking to replace Obsidian with a self-hostable alternative (that preferably also uses Markdown - but it's not a must) but instead of storing the files directly on disk has a way to have all the files within in an encrypted vault / binary format.

Reason being I have very very sensitive data that needs to be stored (employee & medically related).

I read that Logseq used to support this feature but it has since been deprecated, some light googling didn't surface any results other than that so I would be delighted if anyone had any suggestions!

Thanks so much in advance for any and all help! :)

edit: Forgot to mention that it needs to support Linux as well as Android

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 2 years ago (1 child)

The problem is how many random characters can you remember in your head?

A good encryption key would be around 32 characters to form a 256 bit encryption key.

You can do a fun game of encrypt the encryption key with a password but that's just another vulnerability in the chain.

I recommend getting a PGP key stored on a yubikey and then encrypt all your notes with it since it's all in markdown, I store my notes on Google drive and keep them decrypted in memory so that I can still use Obsidian.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 7 points 2 years ago (1 child)

    Or just use a password manager like keepass where the problem of storing passwords has been solved already...

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago

    As long as you protect that password store with a sufficiently strong password that you store in a password manager that has a sufficiently strong password :P

    I joke but yes some sort of password store is what you would use but make sure that password store needs something like a yubikey with a strong private key on it ^⁠_⁠^

  • permalink
  • fedilink
  • source
  • parent