Secure-Smart-Sync is an Obsidian plugin that syncs your vault to Cloudflare R2 with client-side encryption. Your files are encrypted before they ever leave your device — no exceptions.
Built around a single principle: your notes never touch a server in plaintext.
Files are encrypted on your device using AES-256-CBC before upload. The remote never sees plaintext — ever.
Syncs silently after you stop writing. Other open devices are notified instantly via a relay — no polling delay.
Uses Cloudflare R2 — S3-compatible, zero egress fees, generous free tier. You own the bucket. No vendor lock-in.
Compares local, remote, and last-known state to make correct decisions — even after offline editing on multiple devices.
Share credentials to a new device in seconds using a one-time pairing code — no manual copy-pasting of keys.
Works on all platforms Obsidian supports. A dedicated floating indicator on mobile keeps sync visible without interruption.
From keystroke to synced — the full picture.
The plugin watches for changes. Smart Sync starts a short idle timer each time you type.
Before any file leaves your device, it is encrypted with your password using AES-256-CBC. Filenames are also encrypted via Salsa20.
Encrypted blobs are pushed to your Cloudflare R2 bucket. Only changed files are transferred — not the full vault.
A lightweight sentinel signal is written to R2. Other open devices detect it within seconds and begin pulling changes.
Downloaded files are decrypted on the receiving device using your password — never on any server.
Cloudflare R2 charges $0 for data egress — the fundamental flaw of traditional cloud storage for sync tools. Most users will never pay anything.
Browse the full documentation — from quick setup to advanced architecture. Estimate your Cloudflare usage with the token calculator.
Secure-Smart-Sync has been tested across multiple devices and typical workflows. As with any sync system, edge cases can occur in complex scenarios — offline conflicts, unusual file structures, or interrupted syncs. Keeping a local backup of your vault is always a smart habit.
Issues? Open a GitHub issue — every report genuinely helps.