Encrypted Forms: not able to use different sets of keys as public key gets replaced on your server side to all my forms.

  • lcuwebmaster
    Asked on December 18, 2017 at 10:29 AM

    I am having an issue when I apply a new encryption key or upload a my own public key. Whatever key I upload will apply it to all the forms I have encrypted.  From one support person they told me to disable encryption on all my forms and then reapply the encryption key.  This still didn't work.  

    Here are three forms that I tried to have difference encryption keys for:
    https://form.jotform.com/61734697166164
    https://form.jotform.com/72836429493165
    https://form.jotform.com/73464050893157

    I also have a video of going through the process on my end of how it changes the keys on other forms.  I have also looked through the FAQ and trying to follow the answer for question 12, https://www.jotform.com/help/344-Encrypted-Forms-and-How-to-Use-Them#Are-Keys-Created-per-Form-or-per-Account 

    I have done this in the past and it worked but when I tried to create a new encrypted form last week I found that all the new data that came in from previous forms could only be opened with the newest private key generated.

  • David JotForm Support Manager
    Replied on December 18, 2017 at 11:37 AM

    Whenever you create a new key, the key will only decrypt new data, not previous data. So, the keys you have created for each form, will only work we new data. If you need to decrypt old data, it has to be done with the key that was created before that data was received.

  • lcuwebmaster
    Replied on December 18, 2017 at 1:02 PM

    Correct...

    My problem is that when I create a new key on a different form it removes the public keys from all the other encrypted forms and replaces it with the new public key on all the other forms

  • Kiran Support Team Lead
    Replied on December 18, 2017 at 2:10 PM

    Since only one key can be stored in the browser storage, the last created key will be replacing the previous key. To overcome this, you may consider using the same key for each form from now by uploading the key.

    https://www.jotform.com/help/344-Encrypted-Forms-and-How-to-Use-Them

    Please give it a try and let us know if you need any further assistance. We will be happy to help.

  • lcuwebmaster
    Replied on December 18, 2017 at 2:33 PM

    I know only one private key can be stored in the browsers storage and I use a private browsing mode for access different forms since I have different groups access different forms.  


    The public key gets stored on your end though and not the browser storage, since you have to encrypt the information before it goes over the internet.  1513625483jotform key Screenshot 10


    My issue is that the public key gets replaced on your server side to all my forms.  I have to be able to use different sets of keys

  • David JotForm Support Manager
    Replied on December 18, 2017 at 2:53 PM

    I have forwarded this to our back-end team. You will be updated via this thread.

  • hasan JotForm Developer
    Replied on December 19, 2017 at 2:04 AM

    Hi,

    Yes, you are right. We are storing only one key for an account. When a new key is created, it replaces the old one.

    I'll open a feature request for your case, but we can not give you an estimated time for this.

  • Justin Brown
    Replied on December 19, 2017 at 8:53 AM

    Just curious, if this is a feature you already have and it is in your documentation for encrypted forms, Question 12.  Why is this considered a new feature request when I have used it in the past?

  • hasan JotForm Developer
    Replied on December 19, 2017 at 10:09 AM

    We are sorry for the confusion. The mistake in the documentation is marked and will be updated soon.

    However, as you indicated that it is working before, we checked the underlying system but could not find anything related to that. We are investigating it further.

    To clarify, we are storing public keys per account basis and JotForm is overwriting the existing public keys when new keys created. Old private keys can be used for previous submissions but new submissions will be encrypted with the new keys.