grub-basket_SP/release-notes/0.98.38.md

0.98.38 — Vault encryption

A large release: Stashpad can now encrypt notes at rest, on top of the existing .stash export encryption. Everything is opt-in — set up an encryption password first (Settings → Encryption). Lost passwords are unrecoverable by design; there is no backdoor.

Encryption setup & key management

• Set an encryption password for the vault (Settings → Encryption). The key is password-derived; the password itself is never stored.
• Optionally remember the password in the OS keychain so an idle auto-lock re-unlocks silently instead of re-prompting.
• Idle auto-lock: forget the key from memory after N idle minutes.
• Change password (re-wraps the same key) and Remove encryption. Removal is refused while any encrypted content still exists, so you can't strand locked notes by erasing the key.

Lock & unlock notes

• Encrypt (lock) a note + its children into one encrypted bundle, in place. The readable copy is removed; a 🔒 placeholder takes its slot. Unlock restores it (one click on the placeholder, or the command).
• Available from the note context menu, a dedicated "Encrypt (lock) selection" command, and a recoverable "Decrypt (unlock)" command that works on a selection or recursively through a parent's subtree.
• "Decrypt ALL locked notes in the vault" command as a one-shot unlock-all.
• Locked placeholders keep their slot in manual-sorted lists, carry a timestamp, and have their own right-click / mobile menu. An optional "Hide titles of locked notes" setting shows a generic label instead of the note title.
• Encryption view filter in the view dropdown: show all, locked only, or decrypted only.

Folders

• Encrypt / decrypt all notes in a folder from the folder-panel menu, with progress for large folders.
• Archive folders: mark a folder so any note moved into it is automatically encrypted. A default archive folder + a "Move selection to archive" command make one-tap archiving easy; the action is undoable.

Secure delete & encrypted trash

• "Encrypt & delete" sends a note to an encrypted trash instead of leaving a readable copy behind. An opt-in "Encrypt items sent to trash" setting routes the normal delete through the same path.
• A dedicated Encrypted trash tab lists deleted notes grouped by the folder they came from, with per-item and Restore all recovery. Undo (Ctrl/Cmd+Z) brings a just-deleted note straight back.

Security hardening

• Locking/secure-deleting permanently removes the plaintext rather than sending it to the system/.trash (where it would stay readable). The encrypted blob is verified byte-for-byte before the original is removed.
• When titles are hidden, the title is kept out of filenames and metadata, not just the on-screen label.
• Attachments referenced only by a locked note are encrypted with it (shared ones are left in place); restore reuses an existing copy by content instead of duplicating.

Fixes & polish

• Cross-folder search/picker no longer mislabels a folder's home note (home notes shared an internal id and collided).
• Folder panel: single-click opens a folder (and the "Open in new tab" button responds to every click), the "Folders" heading opens the folder switcher, a trash button sits beside it, and archive folders show an archive icon. The switcher lists archive folders with their icon and an "Open encrypted trash" entry.