Contents
All customer data stored in SharePoint Online is encrypted (with one or more AES 256-bit keys) and distributed across the datacenter as follows. The keys used to encrypt the blobs are stored in the SharePoint Online Content Database. The Content Database is protected by database access controls and encryption at rest.
With cloud storage being used more and more often for personal and business purposes, it’s normal to wonder how secure your files are in programs like One Drive and SharePoint Online. While it is possible for a hacker to access such secured cloud storage, it is highly unlikely to occur.
Where are the encryption keys for SharePoint stored?
The set of encryption keys for these chunks of customer data is itself encrypted. The keys used to encrypt the blobs are stored in the SharePoint Online Content Database. The Content Database is protected by database access controls and encryption at rest.
When a file is downloaded, SharePoint Online retrieves the encrypted customer data from Azure storage based on the unique document identifier and decrypts the customer data before sending it to the user.
How is transparent data encryption performed in Microsoft Azure?
Encryption is performed using Transparent Data Encryption (TDE) in Azure SQL Database. (Azure SQL Database is a general-purpose relational database service in Microsoft Azure that supports structures such as relational data, JSON, spatial, and XML.) These secrets are at the service level for SharePoint Online, not at the tenant level.
Which is encryption for OneDrive for business and SharePoint Online?
BitLocker is deployed for OneDrive for Business and SharePoint Online across the service. Per-file encryption is also in OneDrive for Business and SharePoint Online in Microsoft 365 multi-tenant and new dedicated environments that are built on multi-tenant technology. While BitLocker encrypts all data on a disk,