JotForm User Guide / Create Forms /

Encrypted Forms and How to Use Them

Encrypted Forms and How to Use Them

An Encrypted Form offers another layer of security on top of the already secured forms and submissions we offer. You may have read about this on our blog, Introducing Encrypted Forms: The Ultimate in Online Form Security.

If you're here, then you're probably looking for more info. Be warned that this is way longer than our usual guides so below is a quick list of all the questions answered here so you can quickly jump to the questions that matter to you:

Are Forms and Submissions Secure Without the Encryption Feature Enabled?

Your forms and submissions are, as they have always been, secure. If you need an extra level of security we recommend using the secured URL of your forms as they will cause the forms to be loaded over a secured (encrypted tunnel). Remember, your form URL comes in two varieties:

  1. HTTP URL:

All forms you create now use the SSL (HTTPS) version by default. So yes, your forms and submissions are secure even without encryption.

Note that if you are not familiar with the feature, or have not heard of RSA algorithms, then you'll most likely not need this feature at all.

What Is the Difference Between a Secure Form and an Encrypted Form?

When you get the embed codes (or the URL) of your secure form, it will use the HTTPS protocol. This means that there's a strong encryption that creates a tunnel between our servers and the people filling out your forms. As they submit the form, the form is also submitted over this same HTTPS (secure) protocol, so with just that, your forms are safe.

While a secure HTTPS form encrypts data in transfer, an encrypted form encrypts the stored data on top of that. There is no way to decrypt the stored submission data without the correct private key (more on this later). For ultimate security, we do not store the private keys on our end when you use encrypted forms.

How Can I Enable Form Encryption?

On your Form Builder, go to Settings > Form Settings > Show More Options, then toggle the Encrypt Form Data option to "Yes".

Encryption Form Settings Page

As soon as you toggle it to "Yes", you will get a modal popup (shown below) that will ask you to add your own public key or to have one generated for you, so we will go through both options.

Create encryption keys

Generating the Private Key for You

This is the recommended way if you're not sure how to create private and public keys since we will make them both for you - Remember, they must be created properly for you to be able to utilize this powerful feature.

To get it done, just click the Create encryption keys for me button.

Create encryption keys

You will see it rotating a bit.

Create Private Key

And then, you will be prompted to save the key.

Save Key

If you're not prompted to download it, don't worry because we got that covered. You can just click on the Download Private Key button and that's it.

Encrypted Keys Created

Our recommendation is to save it in a place that is both easy to find, and you can be sure that it will not be removed. This is an important step since no one will be able to decrypt the data if the private key is lost.

Uploading Your Own Public Key

So, you are a pro at this and would like to generate the private and public key pair yourself - Great! 😉


Within your terminal (Unix-based OS) run the next command to generate a private key file.

openssl genrsa -out rsa_2048_private.pem 2048

Then run the next command to generate a public key file.

openssl rsa -pubout -in rsa_2048_private.pem -out rsa_2048_public.pem

Finally, upload the generated rsa_2048_public.pem key file to JotForm.

Create Keys

As soon as you upload the public key, it is added to your account.

How To Use an Encrypted Form?

You use it just as you would any other form in your account. The only visual difference is a small green lock icon beside the submit button. Also, your data is now securely encoded before it is submitted, so do not worry about those strange characters that appear on the form just a moment before the form is submitted - It's just Podo, going through your data and making sure that they leave that browser in a secure, encrypted way.

Small Green Lock

Where Can I Find the Private Key After Downloading It?

On a Windows PC, it's most likely in the Downloads folder. So all you need to do to access it is to either type this into the File Explorer's address bar:


Or, click the Downloads folder on the left panel of the File Explorer.


If you're a Mac user, check the Downloads folder.

Mac Downloads Folder

Am I Notified via Email When an Encrypted Submission Comes In?

Yes, you are, but not in the usual way. Instead of seeing the actual submission data, you will receive an email stating that you received an encrypted response. It looks like this:


How Can I Decrypt the Data From the Email or Through the Submissions Page?

When you try to view an encrypted submission, you will be asked to upload your private key. This is where you will use the private key you downloaded earlier.

Submissions Key Upload

As soon as you're done uploading it, it will show a success message.

Submissions Key Uploaded Successfully

Once you click on the (X) at the top right corner of the modal popup, it will decrypt the data.

If you're not seeing any modal popup when trying to view an encrypted submission, this could only mean two things:

  1. Your form is no longer encrypted, that's why it is not asking you to upload a key. What this means is that if you make some encrypted form as non-encrypted, you will be able to open the submissions without being asked for the private key, while as soon as you turn the encryption on, it will start asking you for the private key. So, if it doesn't show up, scroll back up to the "How Can I Enable Form Encryption?" section above and ensure that Encrypt Form Data is set to "Yes".
  2. If encryption is enabled, but you are not being prompted to upload your private key (while the data looks encrypted), this means that an incorrect private key file is stored on your browser's Local Storage. The solution is to clear the local browser storage (this is different from browser cookies) to delete the stored private key file from your browser. Once the local storage is cleared, you will be asked to upload the private key file again on your next attempt.

Does This Mean That I Can Now Ask for Passwords and User Credentials?

No, this is still forbidden and will lead to account termination as per our Terms of Use.

Can I Now Ask for Credit Card Details Without a Payment Processor?

No, this is also forbidden and will lead to account termination. User credentials, credit card details, and other sensitive information are not allowed to be collected on JotForm. If you need to process payments, use any of our Payment Processors.

Can I Share the Private Key With Others?

Sure you can but ideally, you shouldn't (unless you trust whom you're sharing it with). Your goal with encryption is total security so, sharing the key is upon your discretion.

Is It Available on the Free Plan?

Yes, of course! 😊

Are Keys Created per Form or per Account?

We are storing public keys per account basis and JotForm is overwriting the existing public keys when a new key is created. Old private keys can be used for the existing submissions, but new submissions will have to use the new key.

When you choose the Create encryption keys for me option for the first time, we will generate the public and private key pair for you. The public key will be stored at JotForm and the private key will be downloaded by you.

You can choose the I will use my existing keys option when enabling encryption on other forms if you prefer to use the same key. This is the recommended approach unless you need different keys for the new submissions.

And, if you choose the Create encryption keys for me option again, it will create a new key pair for your forms.

Remember, we do not store private keys, so you should keep all your private key(s) in a safe and secure place.

What Will Happen if I Lose the Private Key?

If you have lost the private key, then there is not much that you can do. It means that your encrypted data is lost forever, there is no copy of the same on our servers and it is not possible to crack the one that you had.

Our only recommendation is to turn off encryption right away so you can start receiving submissions normally again. Leave the encrypted submission data on your Submissions Page just in case you find the key at some later point in time.

Note that if you can see decrypted data in some browser, but the key is lost, it may be possible to restore the key from that browser's local storage. If this is the case, contact our support for instructions.

What Should I Do if I Lost the Key but Wanted To Keep Encryption Enabled?

It is possible to generate new keys by disabling the encryption feature and then enabling it again. Use the Create encryption keys for me option to generate a new key.

In case you're wondering, no, the new keys will not decrypt the old data.

My Browser Opened Some Texts Instead of Downloading the Key - What Is That?

That is the private key. Depending on your browser's MIME setting you might have it set up to open the file in the browser, to download/save the file, or to pass it on to some application on your computer.

For example, Safari seems to show the file instead of offering a download.

What to do in such cases? Just copy the content and paste it into some empty file and name it as you wish. Just remember to save it in a safe place and never lose it.

Can I Still Accept Payments on Encrypted Forms?

Yes, you can. The data sent to the payment processor you are using will not be encrypted for further handling. This way, your products/subscriptions/donations, their individual prices, and the total values will never be encrypted.

How Can I Turn off the Encryption on My Form?

On your Form Builder, go to Settings > form settings > show more options, then toggle the Encrypt Form Data option to "No".

Encryption Form Settings Page

Is There Any Difference in Speed if Encryption is Turned On?

The loading time of your forms should be the same, but once you hit submit, the form will need to go through each field to encrypt it.

This means that some extra time will be added to the submission of your form, but this would only depend on the number of fields on your form and its complexity, so it will very likely take a bit of time on a form with over 500 fields in it. The encrypted submission data may also take some additional time to load.

Can I Use Any Integration on Encrypted Forms?

Yes and no. While you can create the integration and send the data to it, please note that the data is encrypted on the side of the user submitting the form. Therefore, the same encrypted data will be passed to your integrations.

As such, the data itself is rather useless on the integration end since you will not be able to use it unless you have a way to decrypt the data on the side of that integration. This may be possible using some services, but this is not something we cover.

What Happens To Uploaded Files on Encrypted Forms?

They are handled as is, meaning that any file that gets submitted to your form (a photo, document, etc.) is left unchanged and will be passed as-is. No decryption or additional handling is required to access or view them.

Some of the features that are not available for Encrypted Forms are:

  • PDF downloads (PDF document and Fillable PDF Form). You can still view the data in the PDF Editor, but you can only Print it.
  • Form Reports (Excel, Grid Listing, HTML Table, RSS, Calendar). CSV download is possible but through JotForm Tables only.
  • Form Emails (Notification and Autoresponder).

Caution: The Preview Before Submit Widget will create a conflict with the encryption process and the data will not be encrypted. Please do not use this widget on your encrypted forms!

All server-side gathered and processed data, can not be retrieved in encrypted forms because your private key is never sent to our servers.

Comments and suggestions are welcome below. If you have a question, post it in our Support Forum so we can assist you.

Contact Support:
Our customer support team is available 24/7 and our average response time is between one to two hours.
Our team can be contacted via:
Contact JotForm Support:

Send Comment


See all comments
  • obeyxlydia

    what about those of us joining from google accounts? the password to our google accounts doesn't work to unlock the encryption feature and thats kind of strange and annoying

  • rtwarnermd

    Do I need to encrypt forms for them to be HIPAA compliant

  • LA

    Hi, I was wondering when will it be possible to use PDF Editor for encrypted forms. Will there be a future option or is it possible to request this feature. PDF editor is from Jotform, not an integration. I understand why its not possible for integration but why can't it work for PDF Editor but work for Tables.

  • harborholistichealing

    I never got a key. How is that sent to me? Where do I find it?



  • Kris

    I would like the ability to use the data extract and also the report feature with encrypted forms. I understand the data will be encrypted, that is what I want. Some of us have the ability to decrypt the data locally ad would greatly benefit from the reports feature. It is not feasible to handle hundreds or thousands of submissions within the UI viewer, we must have the ability to download them.

  • AdrienMarchand

    Encrypted forms are totally useless. How can you deal with thousands of datas without exporting them ...

  • qualityoilcompany

    Is it possible to save an encrypted form and return back later to finish the submission?

  • AMorin

    Can I turn encryption on and off without causing changes to my original key? I think the encryption process is causing the slow down when I open my inbox to look at submissions.

  • Matman2018

    Hi I can't download the new private key that I have requested - it won't open or save as...
    Any suggestions?

  • ermanbarbaros

    I am trying to encrypt my form, however, it asks me to provide a password before creating a key.I tried my account password but it says that is wrong.
    I'm logged in to your JotForm account. Then i tried to enable encryption again but I coldn't solve this problem.
    Thanks for your help with this.


    I am trying to encrypt my form, however, it asks me to provide a password before creating a key. Do you now what password it is referring to? I tried my account password but it says that is wrong.
    It doesn't pop up with the create person key or generat key option, it just goes stright to asking me to provide a password.

    Thanks for your help with this.

  • quizmeisters

    We share the log-in for our JotForm account and wondered if the same encryption key is tied to the one JotForm log-in, or if a new encryption key is needed for each device.

    If so, does the new encryption key mean that previous encrypted form responses will be lost forever?

  • Andrea Russo

    Do I need to enable encryption to be GDPR compliant? I need Email notification and Autoresponder and _be_ GDPR Compliant. I'm not sure if I'm obliged by GDPR to enable encrypted forms.

  • pgarenewals

    We'd like to use the Encrypted form and notify folks via Email that we have received their submission. What options to we have if you don't provide the Email Notifications and Autoresponder for Encrypted forms?

  • Dean

    How do I get a hold of you guys to do business. Please email me a phone #. Thank you

  • bioinfo

    How do we use encrypted forms, if we can use Email notifications and Autoresponders?

  • TNBowling

    If you edit the form, do you have to create a new encryption key.
    After editing, the encryption key doesn't seem to be working

  • Anna Caseby


    I am looking for a form to host our grant applications forms on.

    We collect sensitive data and I want to encrypt. It is also very important we can download the file uploads from the forms we collect. We then save these onto a grants database. Also I would like to export some data from the questionnaire that applicants complete in the final section of the application form.

    However, this article states that the following features are not available for Encrypted Forms are:

    1. PDF Downloads.

    2. Reports (this includes downloading Excel and CSV files from within the Submissions Page).

    3. Emails: Email Notifications and Autoresponder (usually emailed to the form submitters).

    Is it possible to un-ecrypt the form submissions, and download the file uploads and export relevant data from the application forms?

  • S1Awards

    I cant decrypt my form submissions anymore. I dont even get an option asking me for my key anymore. Ive tried everything suggested in other posts and I am still looking at dots and numbers.

  • Damien


    Can encrypted forms work when accessed from ipads or mobile phones? I would like to create an encrypted form with a few simple fields like name, email address, phone number to collect event registration data.


  • neelyagency

    Okay. It's working now. I had to go back in and enable encryption and then it gave me the option to find my key which I had saved. Thanks so much!

  • neelyagency

    I simply want to know how to decrypt the submissions that I have. I have my key. I just need step by step instructions. Please call me so someone can help me.

  • JoyrideCoffeeHR

    I never downloaded a key and never saw anything that alerted me to saving a private key while creating my form. I cannot view any of the submissions now. Please help!

  • Suzanne Newman

    The incripted form won’t turn off what do I do this is honestly terrible and a key was never downloaded on this computer I’m the only one that uses it!!!!!!

  • mhdd


    If a form is encrypted, can I still generate an excel report for that form?


  • bbrett

    I have the same questions as MariBiz "please clarify for me" - could you please respond to these?

    Also, the guidance advises that we cannot see excel reports for encrypted forms but I have managed to do this without a problem, does this mean that I can run reports for all encrypted forms or that the encryption is not working on that form?

    Thanks, Becca

  • MariBiz

    Please clarify for me.

    1. The only way to view encrypted form submissions is in your browser using the JotForm console at

    2. There is no way to download all encrypted forms (or data), then decrypt to view/access on your local computer.

    3. There is no way to print the grid of responses found at


  • simplyencrypt

    Nice Blog!! . I Have Also CreateMy Own Blog Related To Encrypt In Computer Plz Visit text encryption

  • COVAIntern

    I am in need of a new key, the old one is no longer accessible. Thank you

  • humex

    I don't found anywhere the encryption key in my computer. Couldd you delete it? Thanks

  • mkapust

    I'm on a Mac, and when I downloaded they private key it opened the text in my browser. How should I save the key?

  • yeardley

    Hi, What level of encryption is this?

    Thanks, David

  • V2

    Where do you upload the key to?

    I have received a submission on an encrypted form. I have downloaded the key. But I am unable to see how to use the key and view the form.

    Many thanks,


    Need my public key removed so I can regenerate a new key pair. Thank you.

  • ypuclub

    HTML Tables do not work for depicting unencrypted data either. Like this it is very difficult to further process our finding. Please enlighten me on how to export the successfully unencrypted data!

  • Julie Gaudiosi

    I am having issues with my encryption key.

    Can we delete it and get a new one? If you lost the key, but want to have the forms receiving the data in encrypted manner the best thing to do is to contact us (simply leave the comment bellow) and we will see to have your public key removed manually - which will allow you to add a new pair of private and public keys to your account.

    This however means that your old data will not be accessible to you any more - even if you find the private key you lost at some other time.

  • pigglywigglymidwest

    You may also want to note that you are unable to download the Encrypted submissions to Excel.

  • mslw

    Are we allowed to collect bank account details using encrypted forms? I mean IBAN and/or BIC/SWIFT codes, not credit card details. The terms of service don't say.

  • bacdeltaacademy

    Hell, The submissions that were encrypted have all this weird text. I click on the submission, but there is nothing prompting for the key so that the text can be decrypted. What am I doing wrong.


  • risingstarsyouth

    Lost the keys for our account. Can you remove the existing keys? Thanks

  • davidwalloed

    Please remove all keys from my account

  • RYLA5400

    I love the encrypted form capability. I ran into a problem while testing the encrypted form. After I filled out the form to verify everything is working, I pressed submit button and it changed to Please wait and then nothing else happened. I never got an email confirmation the form was accepted. Any ideas how I can figure out what I am doing wrong?

  • Coleen723

    Not sure what good this is if I still can't collect credit card info. And BTW - Re: What happens with submissions if we loose the private key?

    It's LOSE not loose.

    lose - verb
    1. become unable to find (something or someone).

    loose - adjective
    1.not firmly or tightly fixed in place; detached or able to be detached.
    "a loose tooth"

  • ecaballerom

    No quiero que salga este mensaje enviado por al cliente que inscribe el formulario. Me pueden ayudar por favor. es en Gmail.

    Noi SPA
    responder a:
    fecha: 3 de junio de 2016, 04:06
    asunto: Hemos recibido tu reserva en NOI SPA satisfactoriamente
    enviado por:
    encriptación: no encriptó este mensaje Más información

  • Miccharles

    I encrypted my form but then decrypted it. I received one submission while my phone was decrypted but I don't know how to decrypt that submission so I can view the data. Can someone help me?

    Michael C.

  • howard31

    Hi. I tried to turn off the encryption on my form in from the "Advanced" tab. Though it shows that the "No" option is selected, my form is still encripted.

  • gromiric

    I am trying to encrypt my forms for submission. When I hit the create encryption keys for me, it just keeps rotating and does not go to the "opening jotform key" screen. Why is it not generating a key?

  • andreamparsons

    I don't think I downloaded the correct file when asked to download my encryption key so my files are not decrypting. Would you please tell me how I can download the correct key. I can not seem to find a way.

  • Bob Cibulskis

    Need to start over on my encrypted form, please remove my keys!

  • jboltz_ihcda

    Does this encrypt any files uploaded through the encrypted form?