Skip to content

[Bug]: Personal settings -> Privacy says that Administrators cannot read my files with master key #1240

@jonathanernst

Description

@jonathanernst

⚠️ This issue respects the following points: ⚠️

Bug description

I have two server-side encrypted Nextcloud instances, one with master key and one with user keys.

The one with master key enabled says : "Your home storage is encrypted using server-side-encryption ↗ with a master key. It means that administrators can access your files, but not read their content."

If I'm not mistaken, that's not true as I'm able to decrypt files without any known user password with this setup.

Steps to reproduce

  1. Enable server-side encryption with default module and settings (master key encryption)
  2. As a user go to Personal Settings->Privacy
  3. Read information about encryption

Expected behavior

The text should read something like this:

 "Your home storage is encrypted using server-side-encryption ↗ with a master key. It means that although your files are encrypted, system administrators can access your files and read their content."

Nextcloud Server version

31

Operating system

Debian/Ubuntu

PHP engine version

PHP 8.4

Web server

None

Database engine version

None

Is this bug present after an update or on a fresh install?

None

Are you using the Nextcloud Server Encryption module?

None

What user-backends are you using?

  • Default user-backend (database)
  • LDAP/ Active Directory
  • SSO - SAML
  • Other

Configuration report

List of activated Apps

Nextcloud Signing status

Nextcloud Logs

Additional info

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions