• Upload existing images — run "Upload all local images in current note" to upload every already-embedded local image in one pass (uploads first, then rewrites the note once — no clobbered links).
• Multi-select delete — tick several images from a checklist and delete them together.
• Find orphaned images — review repo images no note or canvas references anymore, and delete only the ones you pick (report-only; never auto-deletes).
• Right-click Copy — copy the actual image (private or public), or copy the URL (public/CDN only).
• jsDelivr CDN (optional) — for public repos, serve images via the fast jsDelivr CDN; commands convert a note's links between raw and CDN. Auto-disabled for private repos.
• Note-path storage (optional) — mirror each note's vault path in the repo instead of one global folder.
• Heading-based filenames (optional) — name uploads after the note/heading (e.g. MyNote-Setup-1.png) instead of a timestamp.
• Repo Mode Intelligence — mismatch prompt (Use Auto / Switch to Private / Keep Public) when a private repo has public raw links; self-describing private links that survive repo-setting changes; fallback rendering for old raw links from your other repos.
• Clean up — optionally delete the local file after a successful upload (only after the link is safely replaced).
• Smart hover detection — password prompts appear only in main document views, not during hover/page previews.

Create a new GitHub repository to store your images. Name it anything (e.g. obsidian-assets). It can be public or private — NotePix supports both.

NotePix needs a token to upload files.

Recommended (fine-grained, safest):

1. GitHub → Settings → Developer settings → Personal access tokens → Fine-grained tokens.
2. Generate new token. Set an expiration.
3. Repository access → Only select repositories → choose your image repo.
4. Permissions → Repository permissions → Contents → Read and write. (Metadata: Read is added automatically — that's all NotePix needs.)
5. Generate and copy the token immediately (you won't see it again).

This covers everything: uploading, rendering (public & private), deleting, and finding orphaned images.

Note: one advanced feature — automatically resolving old, pre-v2 image links (from very early NotePix versions, e.g. after you renamed or switched image repos) — needs to look across your repositories, which a single-repo token can't do. If you have such legacy links, use a classic token (below). New setups never need it.

Open Settings → NotePix and fill in:

Encryption (recommended):

1. Toggle Enable Encryption on.
2. Enter a strong Master Password (never saved anywhere).
3. Paste your PAT, then click Save Encrypted Token.

You're set — the next image you paste will upload automatically. ✅

Auto (Recommended) — on upload, NotePix checks repo privacy (cached 10 min). Public → inserts https://raw.githubusercontent.com/.... Private → inserts a self-describing internal link obsidian://notepix/v2/<owner>/<repo>/<branch>/<path>.

Public — always inserts raw GitHub URLs. Can still render matching existing raw links from your configured GitHub user via authenticated fetch.

Private — always inserts private internal links, fetched and rendered in Reading/Live Preview using your token.

If the repo appears private while notes contain matching raw links, NotePix shows a 3-button modal: Use Auto Mode, Switch to Private, or Keep Public. Prompts are suppressed per repo with a cooldown to avoid repeated interruptions.

Private images render in both Reading View and Live Preview through authenticated fetch (in-memory; no temp files). If encryption is enabled, you're prompted for the master password once per session when a token unlock is first needed.