This protects data from a malicious server which tries to generate a new identity for a target user and get clients to re-encrypt the data against it. Users can only have one identity, other clients will refuse to accept a new certificate following the Trust on First Use (TOFU) model. The user creates an identity which is signed by the server (using a certificate) and associated with their public key.

The key generation process is designed to keep the contents of the private key from the server while storing it security so it can be synced to other devices the user owns. Every user has exactly one private and public key pair. The encryption is based upon an asymmetric cryptographic system.

The certificate can optionally be issued by a Hardware Security Module so it is possible to issue new certificates for existing users in a secure way.

The process enables a complete audit log, crucial for enterprise use.

If the key could change, a hacker could issue a ‘new’ certificate for the user and have clients respond by re-encrypting data with the new, compromised key.

By default, keys can’t change so as to protect the identity of users from hacking if the server is compromised.

The optional offline administrator recovery key can still be used to re-gain access. Only if a key is lost on all devices AND the 12 secure key words are lost, the user loses access to his/her data.

Each device of the user can aid in recovering their private key.The certificate is checked by the users’ other clients and used by other users to share encrypted files with the first user, based on Trust On First Use. The public key is sent to the server and signed into a certificate. Nextcloud server For self-hosting on your serverĮvery user gets a unique public/private key combination when they first enable end-to-end encryption.Try Nextcloud Try Nextcloud on our live demo.Sign up now Get free account at a provider.Desktop & mobile apps Windows, macOS, Linux, Android, iOS.Enterprise solution For mission-critical use.Nextcloud Enterprise For mission-critical use.Nextcloud at home For families, students & you.Nextcloud Office Real time document collaboration.Nextcloud Groupware Calendar, Contacts & Mail.Nextcloud Talk Calls, chat and video conferencing.

Encrypted folder android