Secure-Smart-Sync is an Obsidian plugin that syncs your vault to Cloudflare R2 with client-side encryption. Your files are encrypted before they leave your device.
Built around a single principle: your notes never touch a server in plaintext.
Files are encrypted on your device using AES-CBC (OpenSSL) or Salsa20 (rclone) before upload. The remote never sees plaintext.
Syncs silently a few seconds after you stop writing. Other open devices are notified instantly via a relay — no polling delay.
Uses Cloudflare R2 — S3-compatible, with a generous free tier. You own the bucket. No vendor lock-in.
Compares local, remote, and last-known state to make correct decisions — even after offline editing on multiple devices.
Share credentials to a new device in seconds using a one-time pairing code — no manual copy-pasting of keys.
Works on all platforms Obsidian supports. A floating indicator on mobile keeps you informed without interrupting your flow.
From keystroke to synced — the full picture.
The plugin watches for changes. Smart Sync starts a short idle timer each time you type.
Before any file leaves your device, it is encrypted with your password using the method you choose.
Encrypted blobs are pushed to Cloudflare R2. Only changed files are transferred, not the full vault.
A lightweight sentinel signal is written to R2. Other open devices detect it within seconds and pull changes.
Downloaded files are decrypted on the receiving device using your password — never on the server.