Encryption doesn't seem to be working

I've configured a google drive shared drive to have an encrypted folder within it, and the code can be seen below. However, whenever I navigate to the encrypted folder in the web client, I can still view the contents of my 'test.txt' file, plainly unencrypted.

e/n/d/r/c/s/q> n
name> encrtypted
Type of storage to configure.
Enter a string value. Press Enter for the default ("").
Choose a number from below, or type in your own value

Storage> 10
** See help for crypt backend at: https://rclone.org/crypt/ **

Remote to encrypt/decrypt.
Normally should contain a ':' and a path, eg "myremote:path/to/dir",
"myremote:bucket" or maybe "myremote:" (not recommended).
Enter a string value. Press Enter for the default ("").
remote> media: 
How to encrypt the filenames.
Enter a string value. Press Enter for the default ("standard").
Choose a number from below, or type in your own value
 1 / Encrypt the filenames see the docs for the details.
   \ "standard"
 2 / Very simple filename obfuscation.
   \ "obfuscate"
 3 / Don't encrypt the file names.  Adds a ".bin" extension only.
   \ "off"
filename_encryption> 3
Option to either encrypt directory names or leave them intact.

NB If filename_encryption is "off" then this option will do nothing.
Enter a boolean value (true or false). Press Enter for the default ("true").
Choose a number from below, or type in your own value
 1 / Encrypt directory names.
   \ "true"
 2 / Don't encrypt directory names, leave them intact.
   \ "false"
directory_name_encryption> 2
Password or pass phrase for encryption.
y) Yes type in my own password
g) Generate random password
y/g> y
Enter the password:
password:
Confirm the password:
password:
Password or pass phrase for salt. Optional but recommended.
Should be different to the previous password.
y) Yes type in my own password
g) Generate random password
n) No leave this optional password blank (default)
y/g/n> n
Remote config
--------------------
[encrtypted]
type = crypt
remote = media:
filename_encryption = off
directory_name_encryption = false
password = *** ENCRYPTED ***
--------------------
y) Yes this is OK (default)
e) Edit this remote
d) Delete this remote
y/e/d> y
Current remotes:

Name                 Type
====                 ====
anatomy              drive
encrtypted           crypt
games                drive
media                drive

e) Edit existing remote
n) New remote
d) Delete remote
r) Rename remote
c) Copy remote
s) Set configuration password
q) Quit config
e/n/d/r/c/s/q> rclone config
e/n/d/r/c/s/q> s
Your configuration is not encrypted.
If you add a password, you will protect your login information to cloud services.
a) Add Password
q) Quit to main menu
a/q> a
Enter NEW configuration password:
password:
Confirm NEW configuration password:
password:
Password set
Your configuration is encrypted.
c) Change Password
u) Unencrypt configuration
q) Quit to main menu
c/u/q> q
Current remotes:

Name                 Type
====                 ====
anatomy              drive
encrtypted           crypt
games                drive
media                drive

e) Edit existing remote
n) New remote
d) Delete remote
r) Rename remote
c) Copy remote
s) Set configuration password
q) Quit config
e/n/d/r/c/s/q> q

the test file output seems perfectly normal:

C:\Users\me\Downloads\rclone>rclone copy c:/users/me/downloads/teest.txt media:crypt -P
Enter configuration password:
password:
Transferred:            23 / 23 Bytes, 100%, 6 Bytes/s, ETA 0s
Transferred:            1 / 1, 100%
Elapsed time:         3.4s

encrypting the filename also says that it'll put a .bin and the end of the file name, and it doesn't seem to do that. Is my configuration wrong? "Media" is a shared google drive.

You need to copy to the encrypted remote name, not the non encrypted one so use "encrypted:" as the remote name.

C:\Users\me\Downloads\rclone>rclone copy c:/users/me/downloads/teest.txt encrypted:crypt -P
Enter configuration password:
password:
2020/06/22 21:49:51 Failed to create file system for "encrypted:crypt": didn't find section in config file

Sorry, could you elaborate?

You'd have to share your whole rclone.cconf without passwords/keys.

1 Like
Enter configuration password:
password:
[media]
type = drive
scope = drive
token = {"access_token":""}
team_drive = 0AMVfbHR_AdAOUUk9PVA

[games]
type = drive
scope = drive
token = {"access_token":""}
team_drive = 0AAS7izxFVEavUk9PdVA

[anatomy]
type = drive
scope = drive
token = {"access_token":""}
team_drive = 0ABDkza_ilVq_dUk9PVA

[encrtypted]
type = crypt
remote = media:
filename_encryption = off
directory_name_encryption = true
password = 

oooooooh, I'm an idiot. I misspelled 'encrypted'

So in this:

That means your whole Google Drive at media is expected to be encrypted. Most folks have a folder in your drive that is your encrypted content.

So in my drive, I have a folder called "crypt" and my encrypted remote looks like:

remote = GD:crypt

and I'd just
rclone copy somefile remote:

So your goal is to only encrypt directory names as that's all you have in the config?

my goal was to encrypt nothing but the file contents itself. I was just messing with every setting I could to see if it would fix itself.

my original intention with the "media:" thing was to turn the original drive into a fully-encrypted backup, but I now know I should just transfer them to an encrypted folder/drive. I now know rclone has to completely download the file, encrypt, and then upload.

Ok, so you are good now?

yep. everything is fine.

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.