Secure Vault Folder with Separate Password (like Dropbox Vault)
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 36.9k
- Forks
- 5.2k
- Avg merge
- 2d 3h
- Merged PRs (30d)
- 713
Description
Hi everyone,
I’d love to suggest a new feature for Nextcloud: a Vault-style folder that requires an extra password or 2FA to access—even when the user is already logged in. This would be perfect for storing sensitive documents like IDs, contracts, or credentials, adding an extra layer of protection if a session is compromised or a device is left unlocked.
Key Features - a special folder (e.g., /Vault) that:
Requires a separate password or PIN to open
Optionally supports 2FA or biometric unlock (on mobile)
Auto-locks after inactivity or logout
Fully integrated into the web UI and mobile apps
Optional encryption at rest (beyond standard E2EE)
Admin controls: enable/disable Vault per user/group
Access logs for Vault activity (open/close attempts)
Selective sync: allow Vault to be excluded from mobile sync
Offline protection: block access to Vault without server authentication
Thanks.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No files, tests, or entry points are named. Start by mapping the existing authentication, 2FA, encryption, web UI, mobile app, sync, and access-log implementations before defining the feature scope. Done should include an agreed design covering unlock, auto-lock, admin controls, logging, sync, offline access, and mobile behavior.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- authentication, mobile-dev, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100