fix(encryption): clarify settings and state/status guidance - #64839
Open
joshtrichards wants to merge 18 commits into
Open
joshtrichards wants to merge 18 commits into
joshtrichards wants to merge 18 commits into
Conversation
- Replace the "main storage" wording with "home storage." - Clarify that this setting does not control separately mounted external storage or trigger bulk encryption or decryption of existing files. Signed-off-by: Josh <josh.t.richards@gmail.com>
Clarify that enabling the administrator recovery key makes it available for account recovery, and that each account must opt in separately. And change control labels for accuracy. Signed-off-by: Josh <josh.t.richards@gmail.com>
Clarify that opting in is required, that this option allows the admin to use the recovery key to restore access to encrypted files if the account login password is lost, and that it does not recovery the account's password. Signed-off-by: Josh <josh.t.richards@gmail.com>
Explain that signing in with the account password initializes the encryption key for the session. Use concise, specific wording that is clear to users and easier to translate. Signed-off-by: Josh <josh.t.richards@gmail.com>
Signed-off-by: Josh <josh.t.richards@gmail.com>
Make encryption status messages clearer and provide guidance specific to each state, including when encryption is disabled, keys need session initialization, or a private key cannot be unlocked. Signed-off-by: Josh <josh.t.richards@gmail.com>
Verify that the admin settings page passes disabled encryption options and a non-default initialization status through to its initial state. Signed-off-by: Josh <josh.t.richards@gmail.com>
Explain how to use the previous and current login passwords to unlock and update the private encryption key. Signed-off-by: Josh <josh.t.richards@gmail.com>
Signed-off-by: Josh <josh.t.richards@gmail.com>
Signed-off-by: Josh <josh.t.richards@gmail.com>
In per-user-key mode, direct users to the personal settings recovery flow; in master-key mode, avoid suggesting they change their personal key password and direct them to their administrator instead (since in master-key mode, initialization uses the system master key rather than the user’s private-key password). Signed-off-by: Josh <josh.t.richards@gmail.com>
Signed-off-by: Josh <josh.t.richards@gmail.com>
Signed-off-by: Josh <josh.t.richards@gmail.com>
Signed-off-by: Josh <josh.t.richards@gmail.com>
…tate The template reads this property, and Admin.php now provides it. Signed-off-by: Josh <josh.t.richards@gmail.com>
Point administrators to the Security settings section where they can enable server-side encryption. Signed-off-by: Josh <josh.t.richards@gmail.com>
Signed-off-by: Josh <josh.t.richards@gmail.com>
Signed-off-by: Josh <josh.t.richards@gmail.com>
joshtrichards
added
bug
2. developing
joshtrichards
requested review from
kristian-zendato,
skjnldsv and
susnux
and removed request for
a team
September 27, 2026 00:48
joshtrichards
requested review from
Altahrim,
CarlSchwan,
come-nc and
provokateurin
September 27, 2026 00:48
joshtrichards
changed the title
joshtrichards
changed the title
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Resolves: #Summary
Tests
TODO
Checklist
3. to review, feature component)stable32)AI (if applicable)