Use encrypted folders to set a password / key that encrypts your data. The content is encrypted on the server with a key derived from the password you choose.

When you encrypt a folder you need to provide your encryption key to access your data. When you provide it, the folder is unlocked on the server for a period you choose yourself (5 minutes, 1 hour, 4 hours, 12 hours, 24 hours or 48 hours). While the folder is unlocked, the key is held in the server's memory for you, your session and that folder only. Your browser only gets a reference to it, and the key is never written to the database.

When validating whether your encryption you specify is right or not we only compare it with a hashed version of it. Meaning that your actual encryption key is never saved in the database - and you are fully responsible to never loose it!

What is encrypted in Docly is:

What is NOT encrypted is:

This is done so that you easily can search and also find encrypted documents and folders. You cannot open them though unless you unlock the encryption.

Docly logs security events in the workspace. An administrator can have the "Security events report" sent, also for a chosen month, from the "Admin" tab in the workspace's properties.

You data is encrypted and decrypted with passwords of your choice (long or short). We are very careful with your keys: they are always transferred over encrypted HTTPS, they are never written to the database, and while a folder is unlocked the key is kept only in the server's memory.

Be very careful that you DO NOT loose or forget your encryption keys. We never save them in the database, meaning that it is impossible for us to retrieve any of your encrypted data without your key.

Store your encryption key safely, typing it is the safest option.

Don't use the same encryption key as your password.

Keep in mind that short encryption passwords are also less secure.

Watch out for key loggers and viruses which this encryption can't provide you any protection for.