Encrypt ownCloud - how it works

If you store data on an ownCloud storage device, you can encrypt it with ownCloud tools to protect it. Otherwise, the files are accessible without a password to anyone who has administrator rights for the web server - for example, the operator of the server. We'll show you how to enable encryption on your server. These instructions refer to ownCloud 8.2.0.

Encrypt ownCloud with the encryption module

ownCloud comes with its own encryption methods. You can activate it as follows:

1. Log in as administrator (admin).
2. Open the menu in the top right corner and select "Administration".
3. In the left column, select "Server-side encryption".
4. Activate the setting "Activate server-side encryption".
5. Read the warnings and then click "Enable encryption".
6. If an encryption module is loaded, server-side encryption should now be activated.
7. If the error message "No encryption module loaded" appears, you must first load the encryption module.

Activate the basic encryption module in ownCloud

Sometimes the encryption module is deactivated in the standard installation of ownCloud. To activate it, do the following:

1. This time open the menu in the top left corner and select the "Apps" item.
2. In the left column, select the menu item "Not activated".
3. Find the "Default encryption module" or "ownCloud basic encryption module" module and activate it using the button below the entry.
4. You can now activate encryption. To do this, follow the first step again.
5. If you have already activated encryption, you will now be asked to log in again to initialize the keys.
6. After logging in again, the server-side encryption of your ownCloud is activated.

Encrypt ownCloud with independent tools

If you have no administration rights and the encryption module is deactivated, you can encrypt your data on your computer before uploading it.

• Container systems like Veracrypt work, but are not very suitable. They create large files that have to be uploaded every time.
• We recommend ways of encrypting the files individually. For example, the CryptSync tool is particularly recommended for cloud services. It also works for other cloud services like Dropbox.

Set up recovery password for ownCloud encryption

So that you do not lose your data if your login password is lost, you can also set up a recovery password:

1. As an administrator, open the menu for "Server-side encryption" that you used to activate it.
2. Enter a recovery password there and click on "Activate recovery password".
3. As a user without administrator rights, you can select the "Personal" item from the top right menu and open the settings for the encryption module in the left column to set up a recovery password.

In the next practical tip, you will learn how to keep your ownCloud up-to-date.