From 6a8ec182fa672b1b8b2fdabf04dac2a2aff2b703 Mon Sep 17 00:00:00 2001
From: shamoon <4887959+shamoon@users.noreply.github.com>
Date: Sat, 8 Feb 2025 08:07:04 -0800
Subject: [PATCH] Documentation: clarify encryption docs
---
docs/administration.md | 18 +++++++-----------
1 file changed, 7 insertions(+), 11 deletions(-)
diff --git a/docs/administration.md b/docs/administration.md
index 8e646b326..54d918783 100644
--- a/docs/administration.md
+++ b/docs/administration.md
@@ -565,19 +565,15 @@ document.
### Managing encryption {#encryption}
-Documents can be stored in Paperless using GnuPG encryption.
-
!!! warning
- Encryption is deprecated since [paperless-ng 0.9](changelog.md#paperless-ng-090) and doesn't really
- provide any additional security, since you have to store the passphrase
- in a configuration file on the same system as the encrypted documents
- for paperless to work. Furthermore, the entire text content of the
- documents is stored plain in the database, even if your documents are
- encrypted. Filenames are not encrypted as well.
-
- Also, the web server provides transparent access to your encrypted
- documents.
+ Encryption was removed in [paperless-ng 0.9](changelog.md#paperless-ng-090)
+ because it did not really provide any additional security, the passphrase
+ was stored in a configuration file on the same system as the documents.
+ Furthermore, the entire text content of the documents is stored plain in
+ the database, even if your documents are encrypted. Filenames are not
+ encrypted as well. Finally, the web server provides transparent access to
+ your encrypted documents.
Consider running paperless on an encrypted filesystem instead, which
will then at least provide security against physical hardware theft.