Share Hosted
Yuto Takagi128 downloadsHosted alternative to org-share: sign in with email, share notes with org / allowlist / public audiences. No Cloudflare setup required.
- Overview
- Scorecard
- Updates1
Share Obsidian notes with three audience modes (Org / Allowlist / Public). No Cloudflare setup required — just sign in with your email.
How it works
- Install plugin
- Settings → Share Hosted → enter your email → click "Send magic link"
- Open the link in your email on the same device → confirm → Obsidian opens → you're signed in
- Open any note → Command palette → "Share this note" → pick mode → done
Commands
| Command | What it does |
|---|---|
| Share this note | Modal to pick audience (Org / Specific people / Public) + expiry. Returns URL. |
| Copy share URL | Copies the share URL of the current note. |
| Stop sharing | Un-publishes the current note. |
Audience modes
| Mode | Who can view |
|---|---|
| Org-wide | Anyone whose email is at the domain you signed in with (for example @example.com). Not offered for consumer mail such as Gmail or Outlook.com, where that would mean everyone. |
| Specific people | Only emails you list. |
| Public link | Anyone with the URL. No login required. |
Re-sharing a note opens the dialog with its current audience and expiry. Recipient addresses are kept on the server, not in the note's frontmatter.
Images embedded with ![[image.png]] or  are uploaded with the note
(PNG, JPEG, GIF, WebP, SVG up to 20 MB).
Privacy and security
- Note content is stored on Cloudflare R2.
- Reader authentication uses Cloudflare Access (one-time PIN to email).
- Your session is stored in Obsidian's secret storage (Obsidian 1.11.4 or later), not in the
plugin's
data.json, so it does not travel with your vault through sync or git. On older Obsidian versions it stays indata.jsonas before. Sessions last 30 days. - The sign-in link opens a confirmation page first, and only a sign-in started from this device is accepted. Obsidian receives a short-lived one-time code and trades it for the session, so the session itself never appears in a link or your browser history. "Sign out everywhere" in settings ends all your sessions.
- Shared pages run no scripts and stopping a share also deletes images no other note uses.
- Images are served from a URL derived from the image's content. That URL is not tied to the note's audience: anyone who has it can open the image, even for org-wide or specific-people notes. This has been the design since 0.1.0; avoid sharing images you could not show to someone who gets hold of the link.
- Companion worker source: obsidian-share-hosted-worker.
Status
P2A MVP — service is free, no quotas yet. May add limits if abuse becomes a problem.
Self-hosting
If you prefer running your own backend (BYO model), see obsidian-org-share — same UX, you deploy the worker on your own Cloudflare account.
License
MIT