Enable End to End Encryption

The passwords app offers strong client side encryption which protects all your data with a master password.

Enabling Client Side Encryption

⚠️ Some third-party clients do not support encryption

Important Information

By default, the encryption setup will encrypt all existing passwords, folders and tags except shared passwords. All password revisions but the current will be deleted. The encryption setup will also create a new password entry with your master password. If you do not want this, switch the settings view to Advanced in the top right corner and uncheck the options in step 5 of the setup. The encryption setup will create the new entries before deleting. So even if something goes wrong, there should be no data loss.

Manual encryption setup

1. Open the Settings (More > Settings)
2. Locate the Encryption section at the end of the Security section.
3. Click the Activate button next to End-to-End Encryption.
4. The setup wizard will appear. Click continue to see the master password dialog.
5. Enter the master password with at least 12 characters and confirm it.
6. Click Save.

The encryption setup will automatically encrypt all folders and passwords

⚠️ Do not abort the encryption process or reload the page

Disabling Client Side Encryption

There is no built-in option to disable client side encryption. Passwords offers hidden passwords, which make it impossible to guarantee that all passwords have been decrypted. This would either prevent removing the master passwords or leave some passwords undecryptable. If you're sure that you do not have any hidden passwords, you can try the following steps:

❗ This process will delete any hidden items and all settings

1. Make you have no hidden passwords in any app you use or unhide them in that app.
2. Exit or log out of any client but the Nextcloud app itself
3. Ask your admin to make a backup using passwords backup command
4. Make a complete, unencrypted database export
5. Check the contents of the export with a text editor to verify that your data is exported correctly
6. Go into Settings and use the option to reset everything in the Danger Zone
7. Import the database backup
8. Delete the backup file and restore your settings