Authentication
Journalit uses OAuth sign-in with Google, GitHub, or Discord through a device flow. Authentication is optional for the local-first core workflow, but it is required for backend-dependent premium features such as Trade Sync and AI CSV mapping.
Important
If you only use the local core workflow, you do not need to sign in. Your trade notes, journal files, and review content stay in your Obsidian vault.
Authentication Overview
Local-first core workflow
Manual trade entry, notes, analytics, reviews, and the rest of the local journalling workflow work without an account.
Backend-dependent premium features
Trade Sync and AI CSV mapping require sign-in because they depend on Journalit's backend services.
Device flow login
The plugin gives you a code, opens the activation page in a browser, and then polls until the sign-in is completed.
Free vs Premium Access
Manual trade entry
Create and manage trades locally without logging in.
Analytics and reviews
Use dashboards, review workflows, and other local analysis tools without cloud auth.
Basic account tracking
Keep working with the plugin locally even when you never connect an account.
Reality check
Authentication is not there to lock your journal away. It is there because the premium workflow depends on backend services. The local journal remains local.
Where Authentication Lives In The Plugin
The authentication UI lives under Settings → Sync → Account.
Account identity card
Shows your email when signed in, or Guest when signed out, plus an online or offline status indicator.
Tier badge
Shows the current plan tier such as Free, Pro, or Enterprise when available.
Sign in or sign out
The same tab handles the device-flow sign-in action and clean sign-out.
Manage Subscription
When signed in, the tab links out to the Journalit dashboard so you can manage subscription details.
When You Will Be Asked To Sign In
From Sync account settings
You can sign in proactively from Settings → Sync → Account at any time.
From premium flows
If you try to use backend-dependent premium features such as Trade Sync, the plugin can gate access and prompt you to sign in.
During onboarding
Onboarding can open the Trade Import or Trade Sync flow. The sign-in gate appears when the selected flow actually requires authentication.
Device Flow Process
Start sign-in from the plugin
Open Settings → Sync → Account and click Sign In / Sign Up.
Copy the device code
Journalit generates a short code and shows it inside the sign-in modal.
Open the activation page
Use the plugin's browser button to open journalit.co/activate. If
browser opening fails, the modal also supports a fallback link workflow.
Sign in with your provider
If you are not already signed in on the web, continue with Google, GitHub, or Discord.
Enter the code and continue activation
Complete the activation flow in the browser using the code shown in the plugin.
Complete any required plan step
If your account does not currently have valid premium access, the activation page can branch into plan selection or checkout before device activation finishes.
Wait for the plugin to detect success
The plugin polls automatically and updates Sync account settings once the session has been stored successfully.
Expected timing
The device flow is usually quick. If it drags on, the problem is more likely an expired code, blocked browser launch, or incomplete activation than the polling itself.
OAuth Providers
Good default choice if you already use Google for your personal or trading workflow.
GitHub
A clean option if you prefer to keep product access tied to your GitHub identity.
Discord
Convenient if Discord is already part of how you interact with the Journalit community.
The live web auth configuration supports all three providers. Choose the identity you are most comfortable keeping long term.
Session Refresh
After device activation, Journalit refreshes the backend session automatically when the current access period expires. Protected requests can retry once with the refreshed session, including Trade Import and background sync workflows.
Fewer repeated sign-ins
Normal session expiry does not require another device activation while the refresh session remains valid.
Secure credential storage
Session credentials use Obsidian's secret storage rather than being written into the normal plugin settings file.
Clear recovery path
If refresh is rejected or the session is revoked, Journalit returns to the normal sign-in flow instead of silently looping requests.
What The Account Tab Shows After Sign-In
Email and status
The account card shows the signed-in email and an online indicator.
Tier-specific feature tags
The tab shows which features belong to your active plan, including locked versus unlocked states for some tiers.
Manage Subscription link
The tab links to the web dashboard for subscription management.
Auth support actions
If repeated auth problems occur, the tab can show copy-report and Discord support actions.
Signing Out
Go to Settings → Sync → Account and click Sign Out.
What stops working
Backend-dependent premium features like Trade Sync and AI CSV mapping require an active sign-in session.
What keeps working
Your local notes, trade history in the vault, dashboards, and the broader local journalling workflow continue normally.
What happens to existing data
Signing out does not remove your existing vault content.
Privacy And Data
Local-first journal
Trade notes, screenshots, analysis, and review content stay in your Obsidian vault.
Account data
Journalit stores the account data needed for sign-in state and subscription access, such as email and tier information.
Trade Sync exception
If you use Trade Sync, MetaTrader-related backend data handling is part of that workflow because the server has to process synced reports.
Bottom line
Authentication enables premium backend features. It does not change the local-first nature of your vault.
Troubleshooting
Need help?
Join the Discord community if you need help with sign-in or activation problems.