Zotero At-Rest AES-256 Encryption?
Hello,
I recently read the Zotero Security documentation (https://www.zotero.org/support/security/#zotero_security) which states: “Data in newly created accounts is also encrypted at rest using AES-256.”
I would appreciate clarification on the following:
- What is the account creation cutoff date for this encryption (i.e. on or after what date must an account have been created)?
- How can I check whether data associated with my account is encrypted at rest?
- If an older account does not currently have this protection, can encryption at rest be enabled for it, or is there a migration process?
Thank you for your help.
I recently read the Zotero Security documentation (https://www.zotero.org/support/security/#zotero_security) which states: “Data in newly created accounts is also encrypted at rest using AES-256.”
I would appreciate clarification on the following:
- What is the account creation cutoff date for this encryption (i.e. on or after what date must an account have been created)?
- How can I check whether data associated with my account is encrypted at rest?
- If an older account does not currently have this protection, can encryption at rest be enabled for it, or is there a migration process?
Thank you for your help.
Upgrade Storage
(Note that at-rest encryption is primarily a compliance issue and provides essentially no meaningful security benefit, unless you're concerned about people stealing disks from AWS datacenters.)