mirror of
https://github.com/bitwarden/help
synced 2025-12-22 19:23:19 +00:00
removed /article from URL
This commit is contained in:
@@ -16,7 +16,7 @@ Sends are a secure and ephemeral mechanism for transmitting sensitive informatio
|
||||
2. Using HKDF-SHA256, a 512-bit encryption key is derived from the secret key.
|
||||
3. The derived key is used to AES-256 encrypt the Send, including its file/text data and metadata (Name, Filename, Notes, etc.).
|
||||
|
||||
{% callout success %}Any [password]({{site.baseurl}}/article/send-privacy/#send-passwords) used to protect a Send **is not involved in encryption** and decryption of a Send. Passwords are purely an authentication method, however password-protected Sends will be [blocked from decrypting](#send-decryption) until password authentication is successful.{% endcallout %}
|
||||
{% callout success %}Any [password]({{site.baseurl}}/send-privacy/#send-passwords) used to protect a Send **is not involved in encryption** and decryption of a Send. Passwords are purely an authentication method, however password-protected Sends will be [blocked from decrypting](#send-decryption) until password authentication is successful.{% endcallout %}
|
||||
4. The encrypted Send is uploaded to Bitwarden servers, including a unique Send ID that Bitwarden uses to [identify the Send for decryption](#send-decryption) but **not including** the encryption key.
|
||||
|
||||
## Send Decryption
|
||||
@@ -34,7 +34,7 @@ When you access a Send link:
|
||||
5. Bitwarden servers return the encrypted Send to the Web Vault client.
|
||||
6. The Web Vault client locally decrypts the Send using the encryption key.
|
||||
|
||||
{% callout success %}If your send is [password-protected]({{site.baseurl}}/article/send-privacy/#send-passwords), decryption of the Send will be **blocked by authentication**. The server validates the password and only returns the Send if the password is correct. This should not be confused with the password being used for decryption.{% endcallout %}
|
||||
{% callout success %}If your send is [password-protected]({{site.baseurl}}/send-privacy/#send-passwords), decryption of the Send will be **blocked by authentication**. The server validates the password and only returns the Send if the password is correct. This should not be confused with the password being used for decryption.{% endcallout %}
|
||||
|
||||
## Send Security
|
||||
|
||||
|
||||
Reference in New Issue
Block a user