Veracrypt

Last updated Nov 7, 2022 Edit Source

Cross-platform open-source encryption system for folders.
Has Android support through EDS Lite

Veracrypt supports On-the-fly encryption (OTFE). This article discusses the security features of Veracrypt. The biggest current weakness of Veracrypt (and every other tool) is their vulnerability to stealing the OTF symmetric keys that Veracrypt uses to decrypt and encrypt the files while the vault is mounted. It’s possible to do this by taking a copy of the RAM on the target machine and analyzing the results with their Elcomsoft software. Apple has a T2 security chip that prevents this though, but Veracrypt does not support it. Essentially, given enough expertise, anyone can get the keys to the vault if they have full access to a computer where a vault is mounted.

Obsidian and Veracrypt

This forum post discusses how it’s necessary to close the Obsidian app before demounting the vera vault and then decrypting the vault before opening obsidian. This is because Obsidian caches results in-memory, so just demounting the vault would still let users access some information that is already cached.