From: shamoon <4887959+shamoon@users.noreply.github.com> Date: Sat, 8 Feb 2025 16:07:04 +0000 (-0800) Subject: Documentation: clarify encryption docs X-Git-Tag: v2.15.0~3 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=6a8ec182fa672b1b8b2fdabf04dac2a2aff2b703;p=thirdparty%2Fpaperless-ngx.git Documentation: clarify encryption docs --- diff --git a/docs/administration.md b/docs/administration.md index 8e646b326..54d918783 100644 --- a/docs/administration.md +++ b/docs/administration.md @@ -565,19 +565,15 @@ document. ### Managing encryption {#encryption} -Documents can be stored in Paperless using GnuPG encryption. - !!! warning - Encryption is deprecated since [paperless-ng 0.9](changelog.md#paperless-ng-090) and doesn't really - provide any additional security, since you have to store the passphrase - in a configuration file on the same system as the encrypted documents - for paperless to work. Furthermore, the entire text content of the - documents is stored plain in the database, even if your documents are - encrypted. Filenames are not encrypted as well. - - Also, the web server provides transparent access to your encrypted - documents. + Encryption was removed in [paperless-ng 0.9](changelog.md#paperless-ng-090) + because it did not really provide any additional security, the passphrase + was stored in a configuration file on the same system as the documents. + Furthermore, the entire text content of the documents is stored plain in + the database, even if your documents are encrypted. Filenames are not + encrypted as well. Finally, the web server provides transparent access to + your encrypted documents. Consider running paperless on an encrypted filesystem instead, which will then at least provide security against physical hardware theft.