Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/esg/ssw/help/en-us/index.html?contextId=encrypt-files

Encrypt your files

Your data has value and should be protected. We recommend that you always encrypt your sensitive data, whether you store it locally on your device or in the cloud.

Encryption is a method of scrambling data in a format that is only readable by authorized users. Although encryption won't stop data loss or theft, it keeps your data safe by making it unreadable and unusable to an attacker. When you encrypt a file, it is secured by a key so that only a person that knows the key can access the file.

For a quick overview of how encryption works in Sophos Secure Workspace, see Data security.

Encrypt files

Encrypting files is easy with Sophos Secure Workspace.

When a new file is created by this app or imported from another app, you can encrypt it.

Restriction

If Sophos Secure Workspace is managed by Sophos Mobile, you can only encrypt files with keys from your corporate keyring, not with local keys. For information on using your corporate keyring, see Manage keys.

To encrypt an existing file:

  1. Select the file in the list and choose the Encrypt option.
  2. Choose the encryption key to be used. If there is no key yet, you can create one now.
  3. Tap OK. The selected file is encrypted. If the selection contains folders, all files within folders will be encrypted as well.

If you encrypt a file that is already encrypted, it will be re-encrypted with the new key. If a passphrase is required for the old encryption key and the key is not available in your keyring, you are asked to enter the passphrase.

Decrypt files

Restriction

If Sophos Secure Workspace is managed by Sophos Mobile, you cannot decrypt files.

To decrypt existing files, select them in the file list and choose the Decrypt option.

Sophos Secure Workspace asks you to enter the passphrase to access the data. You are not asked for passphrases of keys that are available in your keyring.