Encrypt modal prefilled password security

[qv1et]

When opening the encrypt modal the password that was used previously is already filled into the first password field. I was wondering how this works. I assume the password is not just stored in some file in plain text. Where is it loaded from and how?

[meld-cp]

Hi @qv1et ,

It's stored in memory for a configured amount of time.

There are some options to turn it off or set the length of time it's remembered, and also how the suggested password is determined.

For example, if it's set to Vault, the last used password is always suggested.

If it's set to Folder, the notes folder is used as the key to remember the password for the given amount of time.

If it's File, then the file path is the key.

This comes in handy if you are editing encryptions a few times in a session. Or if you want to always use the same password for Vault/Folder/File etc

The passwords are forgotten when the timeout is reached, Obsidian is closed, or you run the 'clear session password cache' command from the palette.