How can we help you today?

Start a new topic
Discussions Royal TS (for Windows) Questions
Answered

What encryption is used in the rtsz files when enabled?

Can you elaborate on the encryption used for the Royal TS files?  Any information/transparency would be appreciated.

Best Answer

Hi Jon,


Royal TS is using AES 256 bit encryption for passwords and documents. If no password is provided, a static key is used to encrypt the passwords to avoid them being as plain text in the document. When you provide a document password, encryption is done using the provided password. This also means that if you forget your password, there's no way to retrieve your passwords in the documents.


Let me know if this answers your question.


Regards,

Stefan

10 CommentsSorted by Oldest First
Answer

Hi Jon,


Royal TS is using AES 256 bit encryption for passwords and documents. If no password is provided, a static key is used to encrypt the passwords to avoid them being as plain text in the document. When you provide a document password, encryption is done using the provided password. This also means that if you forget your password, there's no way to retrieve your passwords in the documents.


Let me know if this answers your question.


Regards,

Stefan

2 people like this

Thanks Stefan, that's what I was looking for!

Have there been any changes to the encryption method? This thread is about 7 years old.

I am thinking of storing my rtsz file on my server so I can access it from home and remote laptop.

With adequate password, would it be acceptable to store on dropbox?

Thank you.

1 person likes this

 Hi,

I was reading the description regarding encryption but it is not 100% clear for me.


As I would like to store the .rtsz file not local but at the icloud or onedrive I am wondering if the whole file will be enypted if a password is provided OR if ONLY the password field within the .rtsz file will be encrypted?

I am coming from Devolutions RDM and RDM did a full entrysption of the data file contents.

Thank you in advance.

Hi Marc,


by default, Royal TS stores all data in plain text XML but all sensitive data (like passwords, protected custom fields, etc.) are always encrypted (even if you do not provide a custom password).

There is also an option to encrypt the complete file if you prefer to do so:

https://docs.royalapps.com/r2023/royalts/reference/organization/document.html#encrypt-complete-file


Regards,
Stefan

 WoW, thank you very much, works like a charm, Regards, Marc

Hi Stephan,

what about the PasswordHash section (256 hex characters) ? It doesn't seem to be like a real hash as you can reverse the password within the app. But what is the algorithm to produce it ?

kind regards,

Cyril

 

 

 

 

 

 

 

The PasswordHash is a real hash and we can't recreate the password from that hash (nobody can). The only reason you see the password in the UI is that you entered it at one point and it has been checked against that hash. That password is then held in the process memory for the time being (encrypted, of course). I hope this helps.

Hi stephan, it is perfectly clear then, thank you for this explanation. Cheers, Cyril

You're welcome!

Login or Signup to post a comment
More topics in Questions
See all 285 topics