ObsidianFrom the builder
How to verify Obsidian Sync's end-to-end encryption
Obsidian has published a step-by-step guide that lets users confirm Sync's end-to-end encryption without trusting the company. It explains that a base key comes from the vault password and a per-vault salt via scrypt, then is turned into an encryption key with HKDF for AES-256-GCM. Readers fetch their salt and encryption version from the developer console, copy a Sync WebSocket message from the Network tab and run the provided Node.js code to decrypt it with their own key.
When you use Obsidian Sync , your data is end-to-end encrypted.
Saved . A shortened excerpt from the official blog; the original publisher retains authorship.