Activate encryption
If the names, dates of birth and health information of participants are to be readable only in the browser, activate the tenant's end-to-end encryption. It cannot be switched off in the admin panel.
Prerequisites
- Account type Super admin in an installation with tenants.
- A passkey that can derive keys (PRF), e.g. one stored in iCloud, Google or 1Password. Without a passkey: Set up a passkey.
- A printer or a place for the PDF file that only authorised people can reach, e.g. a safe or a password manager.
- Some time: the browser then encrypts all stored data, and the window stays open for it.
Steps
- Select Settings > Privacy > Encryption.
- Select Activate ….
- Select Confirm with passkey and confirm with your passkey.
Encrypts the names and dates of birth of children, health information and sensitive details of Ferienpass Elmsbrück in the browser. The tenant keeps the recovery key; fepli cannot reset it.
- 1Confirm with a passkey. Only super admins can activate the encryption.
- 2Save the emergency kit. A PDF with the recovery key. You cannot continue without it.
- 3Data is encrypted. Your browser encrypts the existing data. Keep the window open until 100 %; work goes on meanwhile.
- 4Unlock colleagues. Colleagues who read along confirm their access by comparing emojis.
Confirm with your passkey. Your browser then creates the recovery key and your emergency kit.
The Encryption page before the activation and the first step of the dialog.
Warning
The emergency kit is the only way back to the data if no admin can unlock any more. The recovery key on it appears only in this dialog. Whoever has the kit can read all encrypted data of the tenant. Keep it in two safe places.
- Select Download emergency kit (PDF) and save the kit as a PDF in the print dialog or print it.
- Enter the 4 characters of the recovery key whose positions the dialog names.
- Select Start encryption.
- Keep the window open until the status shows Encrypted. You can keep working in another tab.
The emergency kit contains the recovery key. It is created only now and shown nowhere else.
Encrypts the names and dates of birth of children, health information and sensitive details of Ferienpass Elmsbrück in the browser. The tenant keeps the recovery key; fepli cannot reset it.
The dialog after the download, behind it the page while the browser encrypts.
Result
The status shows Encrypted and Active, below it the Fingerprint and the Emergency kit with the date and your name. Admins and organizers see the lock or Set up access in the top bar.
If it does not work
| Problem | Remedy |
|---|---|
| “This passkey cannot derive keys (PRF). Use a passkey stored in iCloud, Google or 1Password.” | Set up a passkey with one of these providers and start again: Set up a passkey. |
| Instead of Confirm with passkey, it says “The encryption needs a passkey. Add one first:”. | Select Add passkey and start again afterwards. |
| No window opens after Download emergency kit (PDF). | Allow pop-up windows for the admin panel in the browser and select the button again. |
| Start encryption stays grey. | The characters do not match. Compare them with the kit; count without “R1-” and dashes. |
| The window was closed before 100 % was reached. | Open the page again and select Resume. |