SOLVED

Are Synchronized files encrypted on the local computer by default ?

%3CLINGO-SUB%20id%3D%22lingo-sub-1164723%22%20slang%3D%22en-US%22%3ERe%3A%20Are%20Synchronized%20files%20encrypted%20on%20the%20local%20computer%20by%20default%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1164723%22%20slang%3D%22en-US%22%3E%3CP%3ENo%20they%20aren't.%20But%20if%20you%20are%20using%20a%20drive%20encryption%20software%20(BitLocker)%2C%20the%20entire%20content%20of%20the%20harddisk%20is%20encrypted%2C%20including%20any%20newly%20created%2Fsynced%20file.%20And%20no%2C%20there%20will%20be%20no%20problems%20in%20doing%20so.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1164851%22%20slang%3D%22en-US%22%3ERe%3A%20Are%20Synchronized%20files%20encrypted%20on%20the%20local%20computer%20by%20default%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1164851%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F552137%22%20target%3D%22_blank%22%3E%40hardballer%3C%2FA%3E%26nbsp%3BAs%20well%20as%20%3CSPAN%3EBitLocker%20there%20is%26nbsp%3BWindows%20Information%20Protection%20(WIP)%2C%20this%20could%20apply%26nbsp%3BData%20encryption%20at%20rest%20for%20business%20data%20on%20the%20(Windows)%20device.%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fsecurity%2Finformation-protection%2Fwindows-information-protection%2Fprotect-enterprise-data-using-wip%23why-use-wip%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fsecurity%2Finformation-protection%2Fwindows-information-protection%2Fprotect-enterprise-data-using-wip%23why-use-wip%3C%2FA%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1165932%22%20slang%3D%22en-US%22%3ERe%3A%20Are%20Synchronized%20files%20encrypted%20on%20the%20local%20computer%20by%20default%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1165932%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you%20both%20for%20your%20answers.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1164541%22%20slang%3D%22en-US%22%3EAre%20Synchronized%20files%20encrypted%20on%20the%20local%20computer%20by%20default%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1164541%22%20slang%3D%22en-US%22%3E%3CP%3EHello%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'm%20pretty%20sure%20this%20question%20has%20been%20asked%20several%20times%20but%20I%20haven't%20been%20able%20to%20find%20a%20clear%20answer.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAll%20the%20documentations%20I've%20seen%20says%20that%20One%20Drive%20for%20Businees%20Data%20is%20encrypted%20%22at%20rest%22%20.%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%3CP%3EI%20guess%20%22at%20rest%22%20means%20that%20the%20files%20are%20encrypted%20on%20the%20cloud%20servers.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBut%20does%20it%20also%20mean%20that%20the%20synchronized%20files%20are%20encrypted%20on%20a%20local%20computer%20%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20a%20computer%20is%20stolen%2C%20can%20anybody%20access%20the%20synchronized%20files%20by%20mounting%20the%20hard%20drive%20in%20an%20other%20computer%20or%20will%20the%20data%20still%20be%20unreadable%20.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20the%20answer%20is%20%22no%20the%20local%20synchronized%20data%20is%20not%20encrypted%22%26nbsp%3B%20%2C%20would%20it%20be%20a%20problem%20to%20encrypt%20the%20onedrive%20local%20sync%20folder%20with%20bitlocker%20or%20any%20other%20folder%20encryption%20software%20%3F%20will%20onedrive%20malfunction%20if%20it%20cannot%20%22read%22%20the%20sync%20folder%20at%20startup%20if%20this%20folder%20is%20not%20yet%20uncrypted%20%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20in%20advance%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1164541%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EOneDrive%20for%20Business%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Highlighted
New Contributor

Hello

 

I'm pretty sure this question has been asked several times but I haven't been able to find a clear answer.

 

All the documentations I've seen says that One Drive for Businees Data is encrypted "at rest" .

I guess "at rest" means that the files are encrypted on the cloud servers.

 

But does it also mean that the synchronized files are encrypted on a local computer ?

 

If a computer is stolen, can anybody access the synchronized files by mounting the hard drive in an other computer or will the data still be unreadable .

 

If the answer is "no the local synchronized data is not encrypted"  , would it be a problem to encrypt the onedrive local sync folder with bitlocker or any other folder encryption software ? will onedrive malfunction if it cannot "read" the sync folder at startup if this folder is not yet uncrypted ?

 

 

Thanks in advance

3 Replies
Highlighted
Best Response confirmed by Juan Carlos González Martín (MVP)
Solution

No they aren't. But if you are using a drive encryption software (BitLocker), the entire content of the harddisk is encrypted, including any newly created/synced file. And no, there will be no problems in doing so.

Highlighted

@hardballer As well as BitLocker there is Windows Information Protection (WIP), this could apply Data encryption at rest for business data on the (Windows) device. 

 

https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protect...

Thank you both for your answers.