Feature: Local Data Encryption with PIN Access

[ImGajeed76]

Description:
We are exploring the possibility of adding a feature to allow users to encrypt their local Axonotes database (e.g., the offline MySQL instance). Access to these local notes would then be protected by a user-defined 6-digit PIN.

Proposed Functionality:

• Local Database Encryption: The user's notes and data stored locally on their device would be encrypted at rest.
• PIN Authentication: Upon attempting to access local data, the user would be prompted to enter a 6-digit PIN.
• Access Lockout: If an incorrect PIN is entered multiple times (e.g., 5 consecutive failed attempts), access to the local data would be temporarily locked.
• Online Session Refresh for Recovery: To unlock local data access after a lockout, the user would need to log in to their Axonotes account through a web browser. This online authentication would refresh the local session, allowing them to either try the PIN again or potentially reset it. Local data would not be lost during this process but would remain inaccessible until the session is refreshed.
• Data Preservation: Forgetting the PIN or triggering a lockout would not result in local data loss. The data remains encrypted and secure, requiring online re-authentication to regain access.

Considerations & Current Status:

• Implementation Complexity: This feature involves significant security considerations and technical challenges, particularly concerning robust encryption and cross-platform compatibility.
• User-Driven Prioritization: This is currently an idea and not on the immediate roadmap. Its development would be contingent on substantial user interest and requests.
• Future Feature: If pursued, this would likely be a post-launch addition rather than part of the initial Axonotes release.

Motivation:
This feature aims to provide users with an additional layer of security for their notes stored on their personal computers, protecting sensitive information from unauthorized local access.