Encryption configuration

The primary purpose of the Nextcloud server-side encryption is to protect users’ files on remote storage, such as Dropbox and Google Drive, and to do it easily and seamlessly from within Nextcloud.
In Nextcloud 9.0 the server-side encryption separates encryption of local and remote storage. This allows you to encrypt remote storage, such as Dropbox and Google, without having to also encrypt your home storage on your Nextcloud server.
Encrypting files increases their size by roughly 35%, so you must take this into account when you are provisioning storage and setting storage quotas. User’s quotas are based on the unencrypted file size, and not the encrypted file size.
Encryption keys are stored only on the Nextcloud server, eliminating exposure of your data to third-party storage providers. The encryption app does not protect your data if your Nextcloud server is compromised, and it does not prevent Nextcloud administrators from reading user’s files. This would require client-side encryption, which this app does not provide. If your Nextcloud server is not connected to any external storage services then it is better to use other encryption tools, such as file-level or whole-disk encryption.

More infos: https://docs.nextcloud.com/server/stable/admin_manual/configuration_files/encryption_configuration.html?highlight=encryption

  • 6 Users Found This Useful
Was this answer helpful?

Related Articles

Force SSL

All new NCO2020 packages have force SSL set by default on the servers.Older packages have not, if...

How to use occ commands without SSH access

A web terminal for admins to launch Nextcloud's occ commandsEnable this app and type your...

Can i change my Cloud domain ?

This is of course possible, but not for free.The reason is that a change of the domain is causing...

Memcache / opcache / 4byte support

PHP OPcache / memcache and 4byte support have been available and preinstalled since our NCO...

Integrity check error

If you get an error about the INTEGRITY CHECK after an update, please open a support ticket and...