aboutsummaryrefslogtreecommitdiffstats
path: root/src/content/docs/guides/symmetric-encrypt-decrypt.mdx
blob: 88606edfe46698ebdb47d3aab6eedffa0d560e40 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
---
title: Symmetric Encryption & Decryption
sidebar:
  label: Symmetric Crypto
---

## What Is Symmetric Encryption?

**Symmetric encryption** is a method of securing data where the **same
password** is used to both encrypt and decrypt information.

Unlike **asymmetric encryption**, which uses a public/private key pair,
symmetric encryption relies on a single shared secret (the password). This
approach is:

- Fast and efficient
- Ideal for large files or quick one-time sharing
- Best used when both parties can safely share the password

> If someone intercepts the password, the encrypted data is no longer secure —
> so always handle password exchange carefully.

## How It Works

1. You choose a **strong password**.
2. That password is used to **encrypt** the data.
3. Anyone with the **same password** can **decrypt** it.
4. No key pair is required — only the shared password.

> Encryption security depends entirely on the strength and secrecy of the
> password used.

## Encrypting Data Symmetrically

To encrypt text using symmetric encryption in GpgFrontend (v2.1.9 and later):

### Enable Symmetric Encryption Feature

1. Go to the Settings.
2. Under the Appearance tab, check the `Sym. Encrypt` checkbox to enable
   symmetric encryption functionality.

![](https://image.cdn.bktus.com/i/2025/07/06/aa24d040771ba182e78b503cf5e0a6f9f4ffc8c5.webp)

### Access the Symmetric Encryption Button

After enabling, you’ll see a dedicated `Sym. Encrypt` button on the main
interface.

![](https://image.cdn.bktus.com/i/2025/07/06/9b9dfde1a024c9637133035a581e0431e1147597.webp)

### Enter the Text or Select a File

- Input the plaintext you wish to protect in the text editor.
- Select a file to encrypt using the file panel.

### Symmetric Encryption

1. Without selecting any public key, click the `Sym. Encrypt` button.
2. When prompted, enter a strong, unique password.
3. This password becomes your encryption key.
4. The text or file will be encrypted into ciphertext.
5. You can save or share the encrypted result.

![](https://image.cdn.bktus.com/i/2025/07/06/89cdd2950b51695afd23ff85f666177f95861292.gif)

> The recipient will need the **exact same password** to decrypt the message.

## Decrypting Symmetric Encrypted Data

To decrypt content that was encrypted symmetrically:

1. Paste the Ciphertext: The message should begin with `-----BEGIN PGP
   MESSAGE-----` and end with `-----END PGP MESSAGE-----`.
2. Initiate Decryption: Choose to decrypt the message.
3. Enter the Password: Input the **same password** that was used for encryption.
4. View the Plaintext: If the password is correct, the original message will be
   revealed.

> If the password is incorrect or mistyped, decryption will fail.

## When to Use Symmetric Encryption?

Symmetric encryption is a great choice when:

- You’re encrypting something **for yourself** (e.g. storing private notes or
  backup files).
- You’re sharing data over a **secure channel**, and can **safely provide the
  password**.
- You don’t want to manage public/private key infrastructure.

However, it is **not ideal** for public communication where secure password
exchange is difficult.

## Tips for Better Security

- Always use a **strong, complex password** (longer is better).
- Never send passwords through insecure channels (e.g., unencrypted email).
- Consider using symmetric encryption as a supplement to public-key encryption —
  e.g., encrypt a file symmetrically, then encrypt the password with the
  recipient’s public key.