# End to end encryption nextcloud

**URL:** <https://help.nextcloud.com/t/end-to-end-encryption-nextcloud/237705>\
**Category:** ℹ️ Support\
**Tags:** encryption-e2e, hosting\
**Created:** [December 22, 2025, 1:44pm UTC](https://help.nextcloud.com/t/end-to-end-encryption-nextcloud/237705 "2025-12-22T13:44:05Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Techno](https://help.nextcloud.com/letter_avatar/techno/32/5_5575768a8748004e209b776fc1b2916d.png) [@Techno](https://help.nextcloud.com/u/Techno)\
**Post date:** [December 22, 2025, 1:44pm UTC](https://help.nextcloud.com/t/end-to-end-encryption-nextcloud/237705/1 "2025-12-22T13:44:06Z")

</div>

Hello,

I am new to nextcloud. I have a managed instance via Hetzner storageshare. I use it to sync my phone pictures on the instantupload folders, and for 2 way sinc of my laptop files via the nextcloud client.

My objective is to keep my data secure and private.

I installed the nextcloud end to end app, enabled it on my phone and laptop and saved the mnemonic. I realized, it is written in the doc “Encryption must be actively enabled for folders”. However from my tests, if I do this I can’t see as easily access the files on both my devices, I would always need to type the mnemonic which is not convenient and also I am not sure apps like memories or recognize would still work. I saw there is also the folder encryption for another layer of seurity.

So what is the best way to keep my data private? I saw there was a default security in transit, is that sufficient? Is there some warnings signs to having just that one and keeping the my content on the cloud in clear (aka not encrypted)?

I am also open to any suggestions and advice that could enhance my security on my sharedstorage.

So I imagine that it’s actually enabled by just installing the app, I guess then you just have the default secure encryption in transit offered by nextcloud and hetzner but that particular nextcloud app is not doing anything

---

<div class="post-metadata">

**Author:** ![mritzmann](https://help.nextcloud.com/user_avatar/help.nextcloud.com/mritzmann/32/43763_2.png) [@mritzmann](https://help.nextcloud.com/u/mritzmann)\
**Post date:** [December 22, 2025, 4:23pm UTC](https://help.nextcloud.com/t/end-to-end-encryption-nextcloud/237705/2 "2025-12-22T16:23:41Z")

</div>

> [@Techno](#):
>
> I saw there was a default security in transit, is that sufficient?

It depends on your threat model.

Who do you want to keep the photos secret from?

- From everyone except Hetzner: Encryption in transit is sufficient.
- From everyone: E2E is necessary.

(I don’t use Nextcloud’s E2E, so I can’t say much about it. I just want to point out that there are also alternatives, like [cryptomator](https://cryptomator.org/), but I don’t have any experience with them either.)

---

<div class="post-metadata">

**Author:** ![wwe](https://help.nextcloud.com/user_avatar/help.nextcloud.com/wwe/32/72963_2.png) [@wwe](https://help.nextcloud.com/u/wwe)\
**Post date:** [December 23, 2025, 5:43pm UTC](https://help.nextcloud.com/t/end-to-end-encryption-nextcloud/237705/3 "2025-12-23T17:43:04Z")

</div>

> [@Techno](#):
>
> I am not sure apps like memories or recognize would still work.

this any other server-side processing like online office will stop working. with e2e encryption your cloud becomes dumb storage.. same applies to cryptomator and any other client-side encryption.

---

<div class="post-metadata">

**Author:** ![system](https://help.nextcloud.com/user_avatar/help.nextcloud.com/system/32/29333_2.png) [@system](https://help.nextcloud.com/u/system)\
**Post date:** [December 31, 2025, 5:43pm UTC](https://help.nextcloud.com/t/end-to-end-encryption-nextcloud/237705/4 "2025-12-31T17:43:36Z")

</div>

This topic was automatically closed 8 days after the last reply. New replies are no longer allowed.