ObsidianQ | Local-First Encryption and Secure Delivery

What It Solves

ObsidianQ helps you protect files, text, and portable delivery packages without relying on external cloud key services. It supports both simple password encryption and trusted key-based exchange for teams.

Local-First by Design

Encryption and decryption run on your machine
Private keys remain under your control
Public identities are exchanged directly between users

Why Secure Contacts Mode Is Different

Uses recipient key exchange so only trusted contacts can open shared encrypted data.
No password handoff is required in Secure Contacts mode.

Portable Secure Delivery

Create self-extracting packages directly from the launcher.
Choose a portable ZIP archive or a single EXE package for recipients who do not have ObsidianQ installed.
Inspect Secure Delivery ZIP and EXE packages before extraction to verify metadata and payload integrity.

Screenshots

Latest screenshots from the current build.

ObsidianQ File tab screenshot — File tab workflow

ObsidianQ Secure Contacts screenshot — Secure Contacts

ObsidianQ Vault screenshot — Vault operations

ObsidianQ Add Contact dialog screenshot — Add Contact workflow

ObsidianQ Text tab ciphertext workflow screenshot — Text tab ciphertext workflow

ObsidianQ Settings tab screenshot — Settings and key management

Shell Integration

Right-click shortcuts for fast encryption and package creation workflows from Windows Explorer.

Windows Explorer New menu showing Obsidian Vault option — New > Obsidian Vault

Windows Explorer context menu showing ObsidianQ Encrypt Decrypt options — Encrypt, decrypt, and create packages from Explorer

ObsidianQ associated file types in Windows Explorer — Native open support for vault, encrypted package, and public identity files

Security Architecture

Post-Quantum Key Exchange: ML-KEM-768 (Kyber)
Authenticated Encryption: XChaCha20-Poly1305
Password Hardening: Argon2id
Hashing & Fingerprints: BLAKE3
Chunked Engine: integrity-oriented large-file processing

ObsidianQ is designed for practical security and transparent workflows. Security claims should always be validated against current release notes and code.

Performance Snapshot

Typical encryption on modern hardware: approximately 1.2-1.4 GB/s
Decryption performance varies by storage, workflow, and mount mode
Real-world throughput depends on hardware, file size, and I/O profile

Quick Start

Set up your identity in Secure Contacts.
Add trusted contacts or use password-based protection.
Encrypt files, protect text, inspect containers, create secure delivery packages, or work in a secure vault.
Share encrypted files with Secure Contacts for seamless access without password handoff, or use portable password-protected packages when you need recipient-friendly delivery.

Tabs Overview

FileEncrypt and decrypt files using a password or recipient key exchange with trusted contacts.

TextProtect short text, clipboard content, or pasted ciphertext using password mode or Secure Contacts key exchange.

VaultCreate and mount encrypted vaults with password protection or Secure Contacts key-based access control.

InspectReview `.obsq`, vault, ZIP package, and Single EXE package metadata without decrypting content.

Self-Extracting PackageCreate portable ZIP or Single EXE secure-delivery packages for recipients without ObsidianQ.

Secure ContactsManage your identity and trusted contacts for key-based exchange.

SettingsConfigure behavior, integration options, and key management actions.

AboutRead security model guidance and project details.

Best Practices

Verify fingerprints before trusting a contact
Back up private keys securely
Use strong passwords in password mode
Store recovery material safely
Keep ObsidianQ updated

Version

ObsidianQ Version: 1.0

Built for secure, high-performance encryption and post-quantum readiness.

Local-first security | Modern cryptography | Trusted file exchange