4 ms·
There's no risk to your data. It's not like this will delete your local data, the only risk is when doing a password reset in some (fairly rare) cases, which do
by yoklov 8y ago
There's no risk to your data. It's not like this will delete your local data, the only risk is when doing a password reset in some (fairly rare) cases, which does attempt to make the risk of doing so clear.
I don't disagree about recovery keys, they're rather new though, eventually it wouldn't surprise me if we did something like that.
- owaislone 8y agoAh, so local data is not encrypted. It's only encrypted before packets are sent to the servers?
- yoklov 8y agoYes, for the most part. For passwords the story is a bit more complex (they're encrypted locally on all platforms, either with your master password (Desktop, probably Android but I don't remember), or a random key stored in the OS storage for iOS), But we don't use the sync key to encrypt local data ever; many users never set up sync, and have no sync key
- aiiane 8y agoThere is a risk if you were relying on sync to be a backup solution (which in the absence of discussing the risk of remote data loss, someone might be tempted to do).
- yoklov 8y agoSure, and we do warn during password reset. I’m unsure of what alternative there is that avoids that risk while still providing the current privacy benefits.