Encrypted Forms: not able to use different sets of keys as public key gets replaced on your server side to all my forms.

  • Profile Image
    lcuwebmaster
    Asked on December 18, 2017 at 10:29 AM

    I am having an issue when I apply a new encryption key or upload a my own public key. Whatever key I upload will apply it to all the forms I have encrypted.  From one support person they told me to disable encryption on all my forms and then reapply the encryption key.  This still didn't work.  

    Here are three forms that I tried to have difference encryption keys for:
    https://form.jotform.com/61734697166164
    https://form.jotform.com/72836429493165
    https://form.jotform.com/73464050893157

    I also have a video of going through the process on my end of how it changes the keys on other forms.  I have also looked through the FAQ and trying to follow the answer for question 12, https://www.jotform.com/help/344-Encrypted-Forms-and-How-to-Use-Them#Are-Keys-Created-per-Form-or-per-Account 

    I have done this in the past and it worked but when I tried to create a new encrypted form last week I found that all the new data that came in from previous forms could only be opened with the newest private key generated.

  • Profile Image
    BDAVID
    Answered on December 18, 2017 at 11:37 AM

    Whenever you create a new key, the key will only decrypt new data, not previous data. So, the keys you have created for each form, will only work we new data. If you need to decrypt old data, it has to be done with the key that was created before that data was received.

  • Profile Image
    lcuwebmaster
    Answered on December 18, 2017 at 01:02 PM

    Correct...

    My problem is that when I create a new key on a different form it removes the public keys from all the other encrypted forms and replaces it with the new public key on all the other forms

  • Profile Image
    Kiran
    Answered on December 18, 2017 at 02:10 PM

    Since only one key can be stored in the browser storage, the last created key will be replacing the previous key. To overcome this, you may consider using the same key for each form from now by uploading the key.

    https://www.jotform.com/help/344-Encrypted-Forms-and-How-to-Use-Them

    Please give it a try and let us know if you need any further assistance. We will be happy to help.

  • Profile Image
    lcuwebmaster
    Answered on December 18, 2017 at 02:33 PM

    I know only one private key can be stored in the browsers storage and I use a private browsing mode for access different forms since I have different groups access different forms.  


    The public key gets stored on your end though and not the browser storage, since you have to encrypt the information before it goes over the internet.  1513625483jotform key.png


    My issue is that the public key gets replaced on your server side to all my forms.  I have to be able to use different sets of keys

  • Profile Image
    BDAVID
    Answered on December 18, 2017 at 02:53 PM

    I have forwarded this to our back-end team. You will be updated via this thread.

  • Profile Image
    hasan
    Answered on December 19, 2017 at 02:04 AM

    Hi,

    Yes, you are right. We are storing only one key for an account. When a new key is created, it replaces the old one.

    I'll open a feature request for your case, but we can not give you an estimated time for this.

  • Profile Image
    Justin Brown
    Answered on December 19, 2017 at 08:53 AM

    Just curious, if this is a feature you already have and it is in your documentation for encrypted forms, Question 12.  Why is this considered a new feature request when I have used it in the past?

  • Profile Image
    hasan
    Answered on December 19, 2017 at 10:09 AM

    We are sorry for the confusion. The mistake in the documentation is marked and will be updated soon.

    However, as you indicated that it is working before, we checked the underlying system but could not find anything related to that. We are investigating it further.

    To clarify, we are storing public keys per account basis and JotForm is overwriting the existing public keys when new keys created. Old private keys can be used for previous submissions but new submissions will be encrypted with the new keys.