# \[Requesting Feedback\] New Encryption Passphrase Workflow **URL:** \ **Category:** STORJLINGS\ **Created:** [December 13, 2022, 1:02pm UTC](https://forum.storj.io/t/requesting-feedback-new-encryption-passphrase-workflow/20693 "2022-12-13T13:02:53Z")\ **Posts on this page:** 15\ **Page:** 1
**Author:** ![littleskunk](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/littleskunk/32/63_2.png) [@littleskunk](https://forum.storj.io/u/littleskunk)\ **Post date:** [December 13, 2022, 1:02pm UTC](https://forum.storj.io/t/requesting-feedback-new-encryption-passphrase-workflow/20693/1 "2022-12-13T13:02:53Z")
We would like to get some feedback on the new encryption passphrase workflow. It is deployed on the QA satellite. Please give it a try and share your thoughts with us. **What has changed:** The encryption passphrase for the file browser is set on the project level. Changing buckets doesn’t require entering it over and over again. **Known issues** Changing the passphrase is possible. We are missing some kind of tool tip that explains to the customer how to find the menu for changing the passphrase. It is hidden under the project drop-down menu. **Tradeoffs** Logout or switching projects will clear the passphrase. In the original design, this feature was designed to be opt-in. The engineering team pointed out that the most secure way to store the passphrase would be inside the browser object like we are currently doing anyway. That removes the opt-in idea because as long as the file browser is open the passphrase is stored in the browser object regardless of customer choice. Opt-out only means it gets cleared earlier. However, there is one downside. Since we don’t persist the passphrase in the session or local storage, it will also be cleared by pressing F5. ---
**Author:** ![BrightSilence](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/brightsilence/32/6048_2.png) [@BrightSilence](https://forum.storj.io/u/BrightSilence)\ **Post date:** [December 13, 2022, 1:52pm UTC](https://forum.storj.io/t/requesting-feedback-new-encryption-passphrase-workflow/20693/2 "2022-12-13T13:52:44Z")
Sounds good in principle, but a lot of it would depend on how the UX is implemented and what information is provided alongside it. I’d love to check it out if it gets rolled out to a validation satellite. It will help prevent users from thinking the pass phrase is tied to a bucket for some reason. The old UX kind of suggested that (in some cases even explicit said that). ---
**Author:** ![littleskunk](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/littleskunk/32/63_2.png) [@littleskunk](https://forum.storj.io/u/littleskunk)\ **Post date:** [December 13, 2022, 2:07pm UTC](https://forum.storj.io/t/requesting-feedback-new-encryption-passphrase-workflow/20693/3 "2022-12-13T14:07:59Z")
> [@BrightSilence](#): > > I’d love to check it out if it gets rolled out to a validation satellite. The new UX is available on the QA satellite. Just imagine that the UI gives you a hint about where the menu for changing the passphrase is located (see the known issue section). ---
**Author:** ![BrightSilence](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/brightsilence/32/6048_2.png) [@BrightSilence](https://forum.storj.io/u/BrightSilence)\ **Post date:** [December 13, 2022, 3:18pm UTC](https://forum.storj.io/t/requesting-feedback-new-encryption-passphrase-workflow/20693/4 "2022-12-13T15:18:12Z")
US2, right? I don’t seem to be getting the activation email… I’ll give it a few more minutes. ---
**Author:** ![littleskunk](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/littleskunk/32/63_2.png) [@littleskunk](https://forum.storj.io/u/littleskunk)\ **Post date:** [December 13, 2022, 3:40pm UTC](https://forum.storj.io/t/requesting-feedback-new-encryption-passphrase-workflow/20693/5 "2022-12-13T15:40:03Z")
[https://satellite.qa.storj.io/login](https://satellite.qa.storj.io/login) ---
**Author:** ![BrightSilence](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/brightsilence/32/6048_2.png) [@BrightSilence](https://forum.storj.io/u/BrightSilence)\ **Post date:** [December 13, 2022, 9:47pm UTC](https://forum.storj.io/t/requesting-feedback-new-encryption-passphrase-workflow/20693/6 "2022-12-13T21:47:29Z")
Right, my bad. So it looks like most of the UX remains the same, still suggesting the passphrase is somehow tied to the bucket. The onboarding flow has you create a first bucket and set a passphrase for that bucket. That context still doesn’t make sense to me since the passphrase is tied to objects (or your session), not to buckets. I also noticed that in the manage passphrase screen you have options to create a new passphrase or switch passphrase, which is essentially the same thing except the first allows you to generate or enter one, while the second only allows you to enter it. Since you’re not creating anything, just switching the passphrase for your current session, I would suggest merging these options under the switch passphrase terminology. ---
**Author:** ![litecactus](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/litecactus/32/1135_2.png) [@litecactus](https://forum.storj.io/u/litecactus)\ **Post date:** [December 14, 2022, 1:54pm UTC](https://forum.storj.io/t/requesting-feedback-new-encryption-passphrase-workflow/20693/7 "2022-12-14T13:54:52Z")
When you first sign up, the box says that each bucket should have its own passphrase but then when you create a new one it doesn’t ask you for a new passphrase. So I’d think the wording needs to change on the new user 1-2-3 step boxes to reflect the new concepts. You could also put on that 1-2-3 step process that if you want to change the passphrase, you can via the project menu dropdown, but if I had to guess independently it’d be in the “access” section under bucket default passphrase or something like that. ![image](https://storj-s3.bcdn.literatehosting.net/original/2X/8/84a98e9e4e5480649fb311d5628ec6996b4c499e.png) ---
**Author:** ![jammerdan](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/jammerdan/32/1121_2.png) [@jammerdan](https://forum.storj.io/u/jammerdan)\ **Post date:** [December 20, 2022, 8:25am UTC](https://forum.storj.io/t/requesting-feedback-new-encryption-passphrase-workflow/20693/8 "2022-12-20T08:25:32Z")
> [@BrightSilence](#): > > That context still doesn’t make sense to me since the passphrase is tied to objects (or your session), not to buckets. That’s indeed very confusing. Let me link to the discussion we had about this in the past, maybe contains some ideas that are useful: > [@Compatibility with c# AWSSDK.S3](https://forum.storj.io/t/compatibility-with-c-awssdk-s3/19012/6): > > I agree, this is coming up a lot and isn’t exactly an intuitive result. Perhaps just adding a note to the satellite object browser that says “Note: Objects uploaded with a different passphrase will not be shown” would already help. Maybe also note this when creating a new access grant. Better documentation would be great too, but we know people don’t read documentation much. It’s better to have clarity within the user experience itself. ---
**Author:** ![Milo123459](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/milo123459/32/7831_2.png) [@Milo123459](https://forum.storj.io/u/Milo123459)\ **Post date:** [February 28, 2023, 2:26pm UTC](https://forum.storj.io/t/requesting-feedback-new-encryption-passphrase-workflow/20693/9 "2023-02-28T14:26:00Z")
Not sure if this is relevant? But will post anyways. ![image](https://storj-s3.bcdn.literatehosting.net/original/2X/b/b16604874eb483915f916582be49a463e9c6dbd1.png) I’m using s3f3, and it’s working! The S3 credentials are the same passphrase as the one created for the bucket, so I’m not sure what went wrong. ---
**Author:** ![littleskunk](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/littleskunk/32/63_2.png) [@littleskunk](https://forum.storj.io/u/littleskunk)\ **Post date:** [February 28, 2023, 2:45pm UTC](https://forum.storj.io/t/requesting-feedback-new-encryption-passphrase-workflow/20693/10 "2023-02-28T14:45:39Z")
> [@Milo123459](#): > > Not sure if this is relevant? But will post anyways. It is relevant. There is something wrong with that message. A fix is already been worked on: [https://review.dev.storj.io/c/storj/storj/+/9768](https://review.dev.storj.io/c/storj/storj/+/9768) ---
**Author:** ![Milo123459](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/milo123459/32/7831_2.png) [@Milo123459](https://forum.storj.io/u/Milo123459)\ **Post date:** [February 28, 2023, 2:49pm UTC](https://forum.storj.io/t/requesting-feedback-new-encryption-passphrase-workflow/20693/11 "2023-02-28T14:49:37Z")
Good to know! I’m just curious, are you saying it is wrong as in the fact that it shouldn’t show up? Or are the numbers wrong? ---
**Author:** ![littleskunk](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/littleskunk/32/63_2.png) [@littleskunk](https://forum.storj.io/u/littleskunk)\ **Post date:** [February 28, 2023, 2:56pm UTC](https://forum.storj.io/t/requesting-feedback-new-encryption-passphrase-workflow/20693/12 "2023-02-28T14:56:23Z")
If you want to be on the safe side you can do an uplink ls --recursive with and without --encrypted. If they both show the same number the message should not show up. If the number is different it would mean you have files in that bucket that can’t be decrypted with the current encryption key. The UI should make that comparison but unfortunately, there is a bug. After fixing that bug I would expect the number to change. If it drops to 0 the message will disappear. Even if we call it a bug it doesn’t mean that fixing it will remove the message entirely. You might have a few files with a different decryption key without knowing it. That is why we implemented that message in the first place. ---
**Author:** ![Milo123459](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/milo123459/32/7831_2.png) [@Milo123459](https://forum.storj.io/u/Milo123459)\ **Post date:** [February 28, 2023, 2:57pm UTC](https://forum.storj.io/t/requesting-feedback-new-encryption-passphrase-workflow/20693/13 "2023-02-28T14:57:17Z")
Thanks for the reply. Do you have any updates on when that fix will be deployed? ---
**Author:** ![littleskunk](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/littleskunk/32/63_2.png) [@littleskunk](https://forum.storj.io/u/littleskunk)\ **Post date:** [February 28, 2023, 3:21pm UTC](https://forum.storj.io/t/requesting-feedback-new-encryption-passphrase-workflow/20693/14 "2023-02-28T15:21:50Z")
I would expect that fix to get deployed next Monday but lately, we postpone the release more often so let’s say sometime next week to be on the safe side. ---
**Author:** ![Milo123459](https://storj.bcdn.literatehosting.com/user_avatar/forum.storj.io/milo123459/32/7831_2.png) [@Milo123459](https://forum.storj.io/u/Milo123459)\ **Post date:** [February 28, 2023, 3:23pm UTC](https://forum.storj.io/t/requesting-feedback-new-encryption-passphrase-workflow/20693/15 "2023-02-28T15:23:51Z")
Cool. Btw, after checking with uplink then counting the lines with AWK with and without --encryption, it is the same number.