# Encryption

Enable encryption app (functionality)
```bash
sudo -u www-data php /var/www/nextcloud/occ app:enable encryption
```

Enable encryption 
```bash
sudo -u www-data php /var/www/nextcloud/occ encryption:enable
```


Enable master key mode
```bash
sudo -u www-data php /var/www/nextcloud/occ encryption:enable-master-key
```



Initialize encryption
```bash
sudo -u www-data php /var/www/nextcloud/occ encryption:init
```


Verify status
```bash
sudo -u www-data php /var/www/nextcloud/occ encryption:status
```


Enable a recovery key
```bash
sudo -u www-data php /var/www/nextcloud/occ encryption:enable-recovery
```


Enable encryption for group folders

By default group folders are excluded from server-side encryption.To enable encryption for group folders, execute command

```bash
./occ config:app:set groupfolders enable_encryption --value='true'
```


Restart scheduled jobs
```bash
systemctl restart nextcloud-cron
systemctl restart cron
```


Verify
```bash
ls -lh /var/www/nextcloud/data/<username>/files/
cat /var/www/nextcloud/data/<username>/files/<file>
```