Obsidian is designed to be a private and secure space for your thoughts. Here’s how we protect your data.
- Private by default
- Your data is saved locally on your device. No account is required, no telemetry data is collected.Privacy policy
- End-to-end encryption
- With Obsidian Sync, your data is secured using the strongest encryption standard, AES‑256.Sync security FAQs
- Transparency
- Obsidian is built on open formats, trusted encryption algorithms, and independently audited code. Developer policies
Independent audits
Regular audits by third-party security firms ensure that Obsidian meets the highest security standards. These reports are shared for transparency, and any vulnerabilities are promptly addressed.
Desktop and mobile clients
• Audited by Cure53
Penetration test and source code audit of Obsidian apps. Covers all client code, with particular attention to hardening the Web viewer plugin ahead of its release. Following this test, the Cure53 team reported that all vulnerabilities have been addressed and the recommendations have been followed.
• Audited by Cure53
Penetration test and source code audit of Obsidian apps. Covers all existing client code to date. Following this test, the Cure53 team reported that all vulnerabilities have been addressed and the recommendations have been followed.
Obsidian Sync
Audit of the Obsidian Sync API, server, and cryptography. All findings were addressed via remediations and disclosures validated by the auditors.
• Audited by Cure53
Audit of the Obsidian Sync API, server, and cryptography. Following this test, the Cure53 team reported that all vulnerabilities have been addressed and the recommendations have been followed.