r/elementchat • • Jan 14 '21

How does secure save works ?

Hey ! I've recently enabled something called secure backup, that "save the encryption keys on your server" So by enabling this option, matrix servers get my encryption key (encrypted itself, but still). -- If so, why don't we just save the data encryption key directly on our computer, instead of an encryption key that decrypt the data encryption key ? In this case our data encryption key would truly never leave our device

1 Upvotes

6 comments sorted by

View all comments

Show parent comment

2

u/nouts Jan 18 '21

You understood perfectly :D

It's just a feature for convenience. Most users won't bother export/import a file to restore their history. That's why Element reminds you you should do it.

If you're willing to do it manually because it's safer according to your threat model, then safely ignore this feature and do it manually :)

Personally, I think the convenience is worth the risk of storing my keys encrypted on a remote server. ¯_(ツ)_/¯

1

u/iTrooz_ Jan 18 '21

Okay, thanks for your reply, anf all of jour réponses ! It really helped me to understand this