nextcloud / nextcloud/privacy

Encryption: Update/clarify what admins can see

Open
#1,240 0 comments 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

1. to develop bug
Dominant language
JavaScript
Stars
23
Forks
15
Avg merge
1d 17h
Merged PRs (30d)
11

Description

⚠️ This issue respects the following points: ⚠️
Bug description

I have two server-side encrypted Nextcloud instances, one with master key and one with user keys.

The one with master key enabled says : "Your home storage is encrypted using server-side-encryption ↗ with a master key. It means that administrators can access your files, but not read their content."

If I'm not mistaken, that's not true as I'm able to decrypt files without any known user password with this setup.

Steps to reproduce
  1. Enable server-side encryption with default module and settings (master key encryption)
  2. As a user go to Personal Settings->Privacy
  3. Read information about encryption
Expected behavior

The text should read something like this:

 "Your home storage is encrypted using server-side-encryption ↗ with a master key. It means that although your files are encrypted, system administrators can access your files and read their content."

Nextcloud Server version

31

Operating system

Debian/Ubuntu

PHP engine version

PHP 8.4

Web server

None

Database engine version

None

Is this bug present after an update or on a fresh install?

None

Are you using the Nextcloud Server Encryption module?

None

What user-backends are you using?
  • Default user-backend (database)
  • LDAP/ Active Directory
  • SSO - SAML
  • Other
Configuration report

List of activated Apps

Nextcloud Signing status

Nextcloud Logs

Additional info

No response

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

The affected text appears under Personal Settings → Privacy in the privacy center; start by locating the encryption message in the repository. Update it to accurately explain that administrators with a master key can access and read users’ files, then verify the revised wording in that view.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
content, frontend
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.