# The "encrypted" local data leak information as plain text **URL:** \ **Category:** Closed\ **Tags:** Middleware\ **Created:** [November 24, 2025, 8:10pm UTC](https://community.anytype.io/t/the-encrypted-local-data-leak-information-as-plain-text/29418 "2025-11-24T20:10:34Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![Code-Jack](https://community.anytype.io/user_avatar/community.anytype.io/code-jack/32/12019_2.png) [@Code-Jack](https://community.anytype.io/u/Code-Jack)\ **Post date:** [November 24, 2025, 8:10pm UTC](https://community.anytype.io/t/the-encrypted-local-data-leak-information-as-plain-text/29418/1 "2025-11-24T20:10:34Z")
### What’s The Bug? According to @anton the data on our devices are supposed to be encrypted: > [@Top 2 missing features that could make you leave anytype](https://community.anytype.io/t/top-2-missing-features-that-could-make-you-leave-anytype/29087/46): > > Your data is stored in encrypted form on your device and you always have access to it. But as I was easily able to prove that the “encrypted” data leak a lot information: ### How To Reproduce It 1. In the folder localstore, in the work directory, there is a file “00006.mem”. 2. Open the file in a text editor. I see (among a lot data gibberish) the following data in plain text: - The names of the Spaces - The filenames(!) of images - The usernames of my invited guests! (And there may be more, I was to lazy to look further) [![](https://community-static.anytype.io/original/3X/d/a/dab2ecbff5ca99cf96cf0ab511d5bab3204ec1e6.jpeg) ](https://community-static.anytype.io/original/3X/d/a/dab2ecbff5ca99cf96cf0ab511d5bab3204ec1e6.jpeg) ### The Expected Behavior Encrypted data should be “white noise” without any structure, but definitively without plain text fragments of the real data! ### Additional Context If Bill Clinton once has had an image with the name “Monica\_gives\_me\_a\_good\_blowjob.jpg” he surely did not want that the public, nor his wife, knows about the existence of that image. Our appreciated @VisualNotes was able to confirm the problem for Apple: > [@Top 2 missing features that could make you leave anytype](https://community.anytype.io/t/top-2-missing-features-that-could-make-you-leave-anytype/29087/61): > > On macOS I can confirm that you can find filenames in plain text in files located in: /Application Support/anytype/Cache/Cache\_Data ### Device Desktop PC ### OS Win 10 ### Anytype Version 0.51.0 ### Network Mode AnySync ### Technical Information OS version: win32 x64 10.0.19045 App version: 0.51.0 Build number: build on 2025-11-24 13:22:00 +0000 UTC at #56332997cccf1a5126ad0a7789013a1fc37b2f59 Library version: v0.45.5 Anytype Identity: AAtt6aReARByswg2CbvZhveoJEEcnydfDu7U2VAkgJALsE7D Analytics ID: 8a514008-4f5d-40d3-970f-a0d241b63af2 Device ID: 12D3KooWQY7QdCb6zTNw6fHxKHb4iAjb3yLfwop5ApExC7pNMZQQ Ethereum Address: 0x2da4881c5D6689bac7d6B6BC00D8862aACca9B60 ---
**Author:** ![anton](https://community.anytype.io/user_avatar/community.anytype.io/anton/32/1454_2.png) [@anton](https://community.anytype.io/u/anton)\ **Post date:** [November 24, 2025, 8:13pm UTC](https://community.anytype.io/t/the-encrypted-local-data-leak-information-as-plain-text/29418/2 "2025-11-24T20:13:34Z")
@requilence @Razor ---
**Author:** ![AnyFriends](https://community.anytype.io/user_avatar/community.anytype.io/anyfriends/32/19140_2.png) [@AnyFriends](https://community.anytype.io/u/AnyFriends)\ **Post date:** [November 25, 2025, 2:54pm UTC](https://community.anytype.io/t/the-encrypted-local-data-leak-information-as-plain-text/29418/3 "2025-11-25T14:54:00Z")
This report has been added to our issue tracker and received by the Development Team. ---
**Author:** ![Filip](https://community.anytype.io/user_avatar/community.anytype.io/filip/32/22248_2.png) [@Filip](https://community.anytype.io/u/Filip)\ **Post date:** [November 25, 2025, 2:54pm UTC](https://community.anytype.io/t/the-encrypted-local-data-leak-information-as-plain-text/29418/5 "2025-11-25T14:54:21Z")
---
**Author:** ![Code-Jack](https://community.anytype.io/user_avatar/community.anytype.io/code-jack/32/12019_2.png) [@Code-Jack](https://community.anytype.io/u/Code-Jack)\ **Post date:** [November 26, 2025, 10:57pm UTC](https://community.anytype.io/t/the-encrypted-local-data-leak-information-as-plain-text/29418/7 "2025-11-26T22:57:30Z")
I just updated to v0.51.1 Now there is no file “00006.mem” anymore. But there is this file: MANIFEST-000001 And this file leaks on first glance a huge lot of YouTube links as plain text. ☹ Didn’t look further, you devs now know that there’s a problem! ---
**Author:** ![anton](https://community.anytype.io/user_avatar/community.anytype.io/anton/32/1454_2.png) [@anton](https://community.anytype.io/u/anton)\ **Post date:** [November 26, 2025, 11:04pm UTC](https://community.anytype.io/t/the-encrypted-local-data-leak-information-as-plain-text/29418/8 "2025-11-26T23:04:31Z")
I would not call it leak. Roma will get back to you. It seems it’s local index or something like this. ---
**Author:** ![Code-Jack](https://community.anytype.io/user_avatar/community.anytype.io/code-jack/32/12019_2.png) [@Code-Jack](https://community.anytype.io/u/Code-Jack)\ **Post date:** [November 26, 2025, 11:11pm UTC](https://community.anytype.io/t/the-encrypted-local-data-leak-information-as-plain-text/29418/9 "2025-11-26T23:11:54Z")
> [@anton](#): > > I would not call it leak You wouldn’t call it “leak”??? Sorry, but this is what I’ve meant in the other thread with “sugarcoating”. ☹ I mean, it doesn’t matter if an included library or something else is the culprit. The fact is, that every idiot who gets hand of my hard disc is able to load files from my Anytype directory into an editor and can see parts of my data! Again: This is not what I expect when we speak about “encryption”! Fact is, that (at least) parts of my internal data are in plain text on my hard disc in the Anytype directory! ---
**Author:** ![sturdily](https://community.anytype.io/user_avatar/community.anytype.io/sturdily/32/14790_2.png) [@sturdily](https://community.anytype.io/u/sturdily)\ **Post date:** [November 26, 2025, 11:38pm UTC](https://community.anytype.io/t/the-encrypted-local-data-leak-information-as-plain-text/29418/10 "2025-11-26T23:38:16Z")
@anton I posted a possible, easiest (probably not the best) solution to this: > [@Top 2 missing features that could make you leave anytype](https://community.anytype.io/t/top-2-missing-features-that-could-make-you-leave-anytype/29087/62): > > From my knowledge… this is Electron cache, and I do not know if there is anything that can be done with it. If there is such care for it, one can add the switch --disable-http-cache to the command line. OR patch the electron.js file: diff --git a/electron.js b/electron.js index 9f58f11d70..9bc83da9f7 100644 --- a/electron.js +++ b/electron.js @@ -48,6 +48,7 @@ for (let i in Cors) { app.commandLine.appendSwitch('ignore-connections-limit', 'localhost, 127.0.0.1'); app.commandLine.appendSwit… Honestly, the alternatives are not worth it at the moment, **at least in my opinion** , there are more important things to do. ---
**Author:** ![mcrakhman](https://community.anytype.io/letter_avatar_proxy/v4/letter/m/3ab097/32.png) [@mcrakhman](https://community.anytype.io/u/mcrakhman)\ **Post date:** [December 7, 2025, 3:51pm UTC](https://community.anytype.io/t/the-encrypted-local-data-leak-information-as-plain-text/29418/11 "2025-12-07T15:51:15Z")
Cross-posting my answer. TLDR there is no leak, everything is written in the docs. > [@Top 2 missing features that could make you leave anytype](https://community.anytype.io/t/top-2-missing-features-that-could-make-you-leave-anytype/29087/64): > > Hi Code-Jack! Can you please check out the docs: [Privacy & Encryption | Anytype Docs](https://doc.anytype.io/anytype-docs/advanced/data-and-security/how-we-keep-your-data-safe#keychain) . Anytype team explicitly says that “We decrypt these encrypted objects on the fly with your keys, perform some logic and then save the results (i.e. indexes) locally. These indexes are not encrypted, but here we assume that only you have access to your local data, i.e. the access to your local computer is not compromised”. This was never something that Anytype hidden from the users etc and they always said abo… ---
**Author:** ![Filip](https://community.anytype.io/user_avatar/community.anytype.io/filip/32/22248_2.png) [@Filip](https://community.anytype.io/u/Filip)\ **Post date:** [December 9, 2025, 11:45am UTC](https://community.anytype.io/t/the-encrypted-local-data-leak-information-as-plain-text/29418/12 "2025-12-09T11:45:34Z")