Where is the encryption key stored?
-
So I installed the Android app, created an account using my Google login & created a few entries. Then when to enable sync and created an encryption key. I backed up the encryption key to Google Drive & logged in to Day One Web with the same Google account. The journal showed up and I didn’t have to provide the encryption key – ok, well, maybe Day One got the encryption key automatically from my Google Drive and encrypted it.
However, I then went on to unlink Day One from my Google account and also deleted the private app storage for Day One that I assume to contain the encryption key. I then opened Day One Web again (in a private browser windows), logged in with my Google account (I had to grant permission to access “basic information” again, but nothing Google Drive related). And to my surprise, the journal was still visible. Why?
Is the journal in fact not encrypted? Or does Day One store the encryption key somewhere else as well? How was Day One Web able to display my journal?
-
Turns out the encryption still needs to be enabled manually in the settings. This is far from obvious or intuitive. I see the encryption key but it doesn’t do anything? Makes little sense to me…
Day One Forums 