Zotero At-Rest AES-256 Encryption?

Hello,

I recently read the Zotero Security documentation (https://www.zotero.org/support/security/#zotero_security) which states: “Data in newly created accounts is also encrypted at rest using AES-256.”

I would appreciate clarification on the following:

- What is the account creation cutoff date for this encryption (i.e. on or after what date must an account have been created)?

- How can I check whether data associated with my account is encrypted at rest?

- If an older account does not currently have this protection, can encryption at rest be enabled for it, or is there a migration process?

Thank you for your help.
  • Accounts created since February 2018 are encrypted at rest.

    (Note that at-rest encryption is primarily a compliance issue and provides essentially no meaningful security benefit, unless you're concerned about people stealing disks from AWS datacenters.)
Sign In or Register to comment.