NEW Veneer v1.0: Local GPU AI covers (135 tok/s) + automatic encrypted image hiding
Try the multi-tab simulator →
[ 01 ] Live Obsidian Demo→ [ 02 ] Why Lock Screens Fail→ [ 03 ] How It Works→ [ 04 ] Install Guide→ [ 05 ] FAQ→
GitHub Download Plugin
Local-first Obsidian plugin · Zero cloud calls

Notes that look like
ordinary notes.

Someone looks over your shoulder? They see a boring grocery list. Type ;; + password on any line and your real note, real title, and hidden images appear in RAM. Switch tabs or walk away, and the cover comes right back.

Install in Obsidian
AES-256-GCM + Argon2id
135 tok/s RTX Vulkan
Auto-masks on tab switch
·
my-vault / Grocery run (Saturday).md
Grocery run (Saturday)
Cover active
;;demo ↵
Masked on tab switch
Veneer: Cover
24 words | 6 lines

Why lock screens fail (and how Veneer fixes it)

Standard encryption tools hide what you wrote, but announce to everyone nearby that you are hiding something. Veneer removes the tell completely with believable cover notes.

1. The “Locked File” Tell

01 - Standard Lock Screen

A password popup screams “I’m hiding something important.” Anyone glancing at your screen knows right away which file to ask about.

01 + Veneer Cover Note

Veneer opens as a normal grocery list, debug log, or workout note. Nothing asks you to unlock. Type ;; blind on any line when you want your real note.

2. The Pasted Screenshot Leak

02 - Unencrypted Attachments

Normally, pasting an image in Obsidian leaves Pasted image.png sitting right in your vault folder for anyone to open in Finder or Explorer.

02 + Encrypted Image Absorption

Veneer sucks local vault images into the encrypted AES-256-GCM note and deletes the raw file from disk. While unlocked, images render from a temporary RAM blob: URL.

3. The Filename Leak

03 - Exposed Note Title

A note titled Q4 Acquisition Targets.md gives away the secret in your sidebar even if the body inside is encrypted.

03 + Automatic Title Swap

Veneer renames the file on disk to match your cover (Grocery run (Saturday).md) and only displays your real title inside the editor while unlocked.

How it works in 4 steps

No modal dialogs or separate vaults. Everything happens inline inside your normal Obsidian tabs with zero plaintext on disk.
STEP 01

Pick or generate a cover.

Click Protect this note. Your local GPU writes a believable cover note (50 to 500 words) matched to your job in under a second via RTX Vulkan.

STEP 02

Type ;; + password on any line.

Nothing shows up on screen as you type. Press Enter, and Argon2id unlocks your real title, text, and images in memory.

STEP 03

Edit normally, never leak to disk.

Every auto-save re-encrypts in RAM into the YAML draft_cache property. Obsidian’s search and cloud sync only ever see the cover.

STEP 04

Switch tabs or walk away, it masks.

Click another tab, Alt+Tab, close your laptop, or hit Ctrl+Shift+X. Keys are zeroed in RAM and the cover returns right away.

Install in 60 seconds

Build from source into your vault’s .obsidian/plugins/deocy/ directory. Zero telemetry.
bash · build & copy plugin 
git clone https://github.com/farizanjum/vener.git
cd vener
npm install && npm run build
cp -r main.js manifest.json styles.css assets/ <vault>/.obsidian/plugins/deocy/
STEP 01 Enable Veneer in Obsidian Settings → Community plugins.
STEP 02 Disable File Recovery in Core plugins so Obsidian never writes unencrypted snapshots.
CIPHER AES-256-GCM + Argon2id (64 MiB memory cost, 4 KB block padding).
LOCAL AI Qwen3 0.6B / 1.7B / 4B GGUF via RTX Vulkan (~135 tok/s) or single-thread WASM fallback.

Frequently asked questions

Direct answers on blind inline unlocking, cover edits, encrypted image absorption, offline GPU covers, and the emergency destruction PIN.

Test any feature in the simulator above
1. How do I unlock a note without a password box popping up?
Click on any empty line inside your note and type ;; followed by your password, then press Enter. A CodeMirror 6 filter catches your keystrokes before they appear on screen or touch the file. If someone types the wrong password, nothing happens at all: no error message, no shake animation, and no popup.
2. What happens if I edit the fake cover note while it’s locked?
Nothing breaks. Your real note stays safely encrypted inside the YAML frontmatter property (draft_cache). You can check off groceries, fix a typo, or add lines to the cover note anytime without touching your hidden data.
3. What if my real note is 500+ words long? Won’t a tiny grocery list look suspicious?
Veneer handles this in two ways. First, it pads encrypted payloads to 4 KB blocks and matches the cover note’s file size so a short grocery list never looks suspiciously heavy on disk. Second, you can set cover length to Auto or Long so your local GPU writes a 500-word multi-section cover note in about 4 seconds.
4. What happens when I paste screenshots or images into a protected note?
Veneer automatically absorbs local vault images (like ![[system-topology.png]]) into the AES-256-GCM encrypted payload and deletes the unencrypted image file from your vault folder. While your note is unlocked, images render inline from a temporary RAM blob: URL that vanishes the moment the note masks.
5. Does the AI model ever use the internet or read my other notes?
Never. After a one-time GGUF model download, cover generation runs 100% offline on your machine using RTX Vulkan GPU acceleration (around 135 tokens/sec) or CPU fallback. It only uses the short job description and everyday topics you type in settings, and never reads your vault.
6. What happens if someone forces me to unlock my laptop? (The ;;! Destruction PIN)
Typing ;;! followed by your emergency PIN on any line zeroes the keys in RAM and deletes the encrypted draft_cache frontmatter payload from your protected notes. Each file permanently becomes just its harmless cover note on disk, while the screen looks like a normal cover note.