Update encryption info authored by Marius David Wieschollek's avatar Marius David Wieschollek
The passwords app offers strong client side encryption which protects all your data with a master password. The passwords app offers strong client side encryption which requires anyone trying to decrypt your passwords to know the encryption passphrase.
## Enabling Client Side Encryption ## Enabling Client Side Encryption
> :warning: Some third-party clients do not support encryption > :warning: Some third-party clients do not support encryption
#### Important Information #### Important Information
By default, the encryption setup will encrypt all existing passwords, folders and tags except shared passwords. - By default, the encryption setup will encrypt all existing passwords, folders and tags except those who are shared.
All password revisions but the current will be deleted. - All previous revisions but the current will be deleted.
The encryption setup will also create a new password entry with your master password. - The encryption setup will also create a new password entry with your encryption passphrase.
If you do not want this, switch the settings view to `Advanced` in the top right corner and uncheck the options in step 5 of the setup. If you do not want this, switch the settings view to `Advanced` in the top right corner and uncheck the options in step 5 of the setup.
The encryption setup will create the new entries before deleting. - The encryption setup will create the new entries before deleting any old ones.
So even if something goes wrong, there should be no data loss. So even if something goes wrong, there should be no data loss.
#### Enabling Client Side Encryption #### Enabling Client Side Encryption
1. Open the Settings (`More > Settings`) 1. Open the Settings (`More > Settings`)
2. Locate the `Encryption` section at the end of the `Security` section. 2. Locate the `Encryption` section at the end of the `Security` section.
3. Click the `Activate` button next to `End-to-End Encryption`. 3. Click the `Activate` button next to `End-to-End Encryption`.
4. The setup wizard will appear. Click continue to see the master password dialog. 4. The setup wizard will appear. Click continue to see the encryption passphrase dialog.
5. Enter the master password with at least 12 characters and confirm it. 5. Choose an encryption passphrase with at least 12 characters and confirm it.
> :warning: Do not use your Nextcloud password.
> Every Nextcloud app can read your Nextcloud password and it offers no security
6. Click `Save`. 6. Click `Save`.
The encryption setup will automatically encrypt all folders and passwords The encryption setup will automatically encrypt all folders and passwords
...@@ -27,7 +29,7 @@ The encryption setup will automatically encrypt all folders and passwords ...@@ -27,7 +29,7 @@ The encryption setup will automatically encrypt all folders and passwords
## Disabling Client Side Encryption ## Disabling Client Side Encryption
There is no built-in option to disable client side encryption. There is no built-in option to disable client side encryption.
Passwords offers hidden passwords, which make it impossible to guarantee that all passwords have been decrypted. Passwords offers hidden passwords, which make it impossible to guarantee that all passwords have been decrypted.
This would either prevent removing the master passwords or leave some passwords undecryptable. This would either prevent removing the encryption passphrase or leave some passwords unreadable and permanently encrypted.
If you're sure that you do not have any hidden passwords, you can try the following steps: If you're sure that you do not have any hidden passwords, you can try the following steps:
> :exclamation: This process will delete any hidden items and all settings > :exclamation: This process will delete any hidden items and all settings
... ...
......