What is JotForm?
JotForm is a free online form builder which helps you create online forms without writing a single line of code. No sign-up required.

At JotForm, we want to make sure that you’re getting the online form builder help that you need. Our friendly customer support team is available 24/7.

We believe that if one user has a question, there could be more users who may have the same question. This is why many of our support forum threads are public and available to be searched and viewed. If you’d like help immediately, feel free to search for a similar question, or submit your question or concern.


  • Profile Image

    I would like to use form encryption and still have access to CSV reports

    Asked by ksupport on May 12, 2016 at 06:01 PM

    Speaking of CSV... I want a CSV which your system can't handle for some reason. Just spit out a fully encrypted file that I can use openssl and my private key to decrypt!   Better yet, send me a email with the encrypted data.  I can then parse the data using my private key. 

    Why do you send my data over the internet in the clear but can't handle CSV and reports. Sending me an email that isn't encrypted is NOT SECURE!

    Why not encrypt my email using my public key using s/mime or similar technology?

    Since my private key doesn't get uploaded to the sever I assume this is using javascript to read and decrypt. Seems like you can make a button to paste data into clipboard as well.

    Finally...  

    After uploading my private key and viewing the submission the matrix widget doesn't decrypt. Why?

  • Profile Image
    JotForm Support

    Answered by david on May 12, 2016 at 06:12 PM

    Here is a brief rundown on form Encryption:

    https://www.jotform.com/blog/162-Introducing-Encrypted-Forms-The-Ultimate-in-Online-Form-Security

    It should be noted that setting up a form as encrypted comes at the cost of some convenience.

     • Notifications will only alert the user that a submission was received- they won’t include the content of the response. (That’s the whole point! The info isn’t legible from our servers.)
     • Users must log into JotForm and also need to enter their private key in order to view their form responses,
     • If you lose the private encryption key, your data is gone. We can’t reset it in a such a way as to recover previously encrypted responses.
     • Some of the features are not available: PDF Downloads, Reports, Emails that contain form data in them.

     

  • Profile Image

    Answered by ksupport on May 12, 2016 at 06:26 PM

    I understand all about SSL and encryption.  Jotform will send an email to me over the internet which isn't secure.  Open of submission and click forward and email appears!  not secure.

    Since you are not storing my data on your servers in clear text that is a security problem. If your not mining my data, why not encrypt on your servers? 

    Since you have my public key, why can't your system email me the fully encrypted data? 

    thanks

     

  • Profile Image
    JotForm Support

    Answered by david on May 12, 2016 at 06:29 PM

    I believe I responded to a similar question in your original thread:

    https://www.jotform.com/answers/838085-How-secure-is-JotForm-data#3