Encrypted Sync / Backups

akade

Hi Timo

First: ein grosses Dankeschön für die tollen Apps, vor allem Working Hours ist absolut genial!

For privacy / data protection obligations reasons, it would be amazing if the backups could be encrypted. Zip encryption (AES!) would be enough. Keys/password could be saved into the OSs respective vault would be perfect. For some projects, I can only use Working Hours with some placeholder names that I than manually translate later in order to be compliant...

Thanks for considering this 🙂

timo

Thanks for the suggestion. Storing the encryption key in the OS vault would prevent restoring the backup on another device, where that key is unavailable.

A reliable implementation would therefore require a user-facing password and key-management flow across all platforms, including handling lost passwords. Due to this complexity, I am currently not considering this feature.

akade

Yes, it would require a user-facing password, but why would that need handling lost passwords? That would be very much in the hands of the user, same as E2E encryption for WhatsApp Backups for example. A new pw would be the same as resetting the db and syncing again, right? I understand that it adds complexity anyway but I still think it would be valuable for the app: If I hadn't already fallen in love with the app, that would probably have stopped me from buying if I had the issue at the time of buying. And with sovereignty becoming more and more important...

Anyway, thanks - I'll probably help myself with setting up some WebDav storage up...