<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Sync passphrase does nothing?]]></title><description><![CDATA[<p dir="auto">I am using a master passphrase. Opera purports to "encrypt <em>all</em> synced data your own master passphrase," and that the passphrase <em>is never sent to Opera</em>. However, when I go to <a href="https://sync.opera.com/web/" target="_blank" rel="noopener noreferrer nofollow ugc">https://sync.opera.com/web/</a> all of my browsing history is displayer <strong>without having to enter my passphrase</strong>!! It seems to me that the passphrase is <strong>not</strong> used to encrypt all of my data, or else I would have to supply it in order to view the data. This is either a massive screw up, or a Opera is deliberately deceiving users into turning over their entire browser history, claiming that it will be encrypted when plainly it is not.</p>
<p dir="auto">The Sync feature is very poorly documented, and I can't find any details about what is actually going on anywhere. The verbiage in the <em>Advanced</em> dialog used to say "encrypt synchronized passwords with your own synchronization passphrase," but it was updated to say "encrypt all synced data with your own master passphrase." So, was the feature upgraded to encrypt <strong>all</strong> data? If so, am I experiencing a bug with sync?</p>
<p dir="auto">If Opera is sending all of my synced data to their mothership so they can spy on me, then I am out of here. Firefox encrypts everything by default, and Mozilla cannot access any synced data at all. Opera claims to do this when using a passphrase, but clearly it's not happening. Tell me, why is Opera lying about how sync works, and can I ever trust Opera again?</p>
]]></description><link>https://forums.opera.com/topic/15317/sync-passphrase-does-nothing</link><generator>RSS for Node</generator><lastBuildDate>Sun, 19 Jul 2026 13:52:58 GMT</lastBuildDate><atom:link href="https://forums.opera.com/topic/15317.rss" rel="self" type="application/rss+xml"/><pubDate>Sun, 22 May 2016 19:04:00 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Sync passphrase does nothing? on Mon, 17 Oct 2016 00:25:40 GMT]]></title><description><![CDATA[<blockquote>
<p dir="auto">Are you using a passphrase?</p>
</blockquote>
<p dir="auto">No, I'm not.</p>
<blockquote>
<p dir="auto">Then again, if you were using Sync before now -- with or without a password -- you clearly don't care about security/privacy anyway.</p>
</blockquote>
<p dir="auto">Like 9 out of 10 people. <img src="https://forums.opera.com/assets/plugins/nodebb-plugin-emoji/emoji/emoji-one/1f642.png?v=89iooh84962" class="not-responsive emoji emoji-emoji-one emoji--slightly_smiling_face" title=":-)" alt="🙂" /></p>
<p dir="auto">Serious, having ny passwords encrypted is enough for me. I really don't care that much if someone find out that I visit this or that page.</p>
]]></description><link>https://forums.opera.com/post/108805</link><guid isPermaLink="true">https://forums.opera.com/post/108805</guid><dc:creator><![CDATA[leocg]]></dc:creator><pubDate>Mon, 17 Oct 2016 00:25:40 GMT</pubDate></item><item><title><![CDATA[Reply to Sync passphrase does nothing? on Sun, 16 Oct 2016 20:01:31 GMT]]></title><description><![CDATA[<blockquote>
<blockquote>
<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="https://forums.opera.com/uid/73">@leocg</a> Are you seriously saying that you can't see any padlocks or text that says "encrypted" on "<a href="http://sync.opera.com" target="_blank" rel="noopener noreferrer nofollow ugc">sync.opera.com</a>" when browsing your synced bookmarks for example?</p>
</blockquote>
<p dir="auto">At <a href="http://sync.opera.com/web" target="_blank" rel="noopener noreferrer nofollow ugc">sync.opera.com/web</a> I can only see a padlock in 'passwords'.</p>
</blockquote>
<p dir="auto">Are you using a passphrase? If you aren't, then it would make sense that nothing but passwords are being encrypted -- basically how it's always been. If you <em>are</em> using a passphrase, maybe it's just not encrypting anything else because you set up Opera Sync before Opera changed how Sync works. If that's the case then you might want to reset Sync and start over. Then again, if you were using Sync before now -- with or without a password -- you clearly don't care about security/privacy anyway.</p>
]]></description><link>https://forums.opera.com/post/108790</link><guid isPermaLink="true">https://forums.opera.com/post/108790</guid><dc:creator><![CDATA[mikecerm]]></dc:creator><pubDate>Sun, 16 Oct 2016 20:01:31 GMT</pubDate></item><item><title><![CDATA[Reply to Sync passphrase does nothing? on Sun, 16 Oct 2016 19:37:38 GMT]]></title><description><![CDATA[<blockquote>
<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="https://forums.opera.com/uid/73">@leocg</a> Are you seriously saying that you can't see any padlocks or text that says "encrypted" on "<a href="http://sync.opera.com" target="_blank" rel="noopener noreferrer nofollow ugc">sync.opera.com</a>" when browsing your synced bookmarks for example?</p>
</blockquote>
<p dir="auto">At <a href="http://sync.opera.com/web" target="_blank" rel="noopener noreferrer nofollow ugc">sync.opera.com/web</a> I can only see a padlock in 'passwords'.</p>
]]></description><link>https://forums.opera.com/post/108789</link><guid isPermaLink="true">https://forums.opera.com/post/108789</guid><dc:creator><![CDATA[leocg]]></dc:creator><pubDate>Sun, 16 Oct 2016 19:37:38 GMT</pubDate></item><item><title><![CDATA[Reply to Sync passphrase does nothing? on Sun, 16 Oct 2016 18:42:11 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="https://forums.opera.com/uid/73">@leocg</a> Are you seriously saying that you can't see any padlocks or text that says "encrypted" on "<a href="http://sync.opera.com" target="_blank" rel="noopener noreferrer nofollow ugc">sync.opera.com</a>" when browsing your synced bookmarks for example?</p>
]]></description><link>https://forums.opera.com/post/108778</link><guid isPermaLink="true">https://forums.opera.com/post/108778</guid><dc:creator><![CDATA[Deleted User]]></dc:creator><pubDate>Sun, 16 Oct 2016 18:42:11 GMT</pubDate></item><item><title><![CDATA[Reply to Sync passphrase does nothing? on Sat, 15 Oct 2016 22:18:49 GMT]]></title><description><![CDATA[<blockquote>
<p dir="auto">Don't listen to him, he's relying on outdated info</p>
</blockquote>
<p dir="auto">All that I said is still valid.</p>
]]></description><link>https://forums.opera.com/post/108747</link><guid isPermaLink="true">https://forums.opera.com/post/108747</guid><dc:creator><![CDATA[leocg]]></dc:creator><pubDate>Sat, 15 Oct 2016 22:18:49 GMT</pubDate></item><item><title><![CDATA[Reply to Sync passphrase does nothing? on Sat, 15 Oct 2016 22:14:12 GMT]]></title><description><![CDATA[<blockquote>
<p dir="auto">How do you know?</p>
</blockquote>
<p dir="auto">If you read the whole topic you will see some links where you may find those information.</p>
<blockquote>
<p dir="auto">If you're correct, why does the dialog say "Encrypt all synced data.."</p>
</blockquote>
<p dir="auto">This was answered already in this topic. It's a bug on the dialog.</p>
<blockquote>
<p dir="auto">and the "<a href="http://auth.opera.com" target="_blank" rel="noopener noreferrer nofollow ugc">auth.opera.com</a>" website tell users that bookmarks etc is encrypted?</p>
</blockquote>
<p dir="auto">I don't see any mention about it.</p>
]]></description><link>https://forums.opera.com/post/108746</link><guid isPermaLink="true">https://forums.opera.com/post/108746</guid><dc:creator><![CDATA[leocg]]></dc:creator><pubDate>Sat, 15 Oct 2016 22:14:12 GMT</pubDate></item><item><title><![CDATA[Reply to Sync passphrase does nothing? on Sat, 15 Oct 2016 19:16:26 GMT]]></title><description><![CDATA[<blockquote>
<p dir="auto">How do you know? If you're correct, why does the dialog say "Encrypt all synced data..", and the "<a href="http://auth.opera.com" target="_blank" rel="noopener noreferrer nofollow ugc">auth.opera.com</a>" website tell users that bookmarks etc is encrypted?</p>
</blockquote>
<p dir="auto">Don't listen to him, he's relying on outdated info. You can get details about what is actually being encrypted at opera://sync-internals/</p>
<p dir="auto">But ultimately, since Opera is closed source, you have to trust that they're actually doing what they say, and that hasn't always been been true in the past.</p>
]]></description><link>https://forums.opera.com/post/108737</link><guid isPermaLink="true">https://forums.opera.com/post/108737</guid><dc:creator><![CDATA[mikecerm]]></dc:creator><pubDate>Sat, 15 Oct 2016 19:16:26 GMT</pubDate></item><item><title><![CDATA[Reply to Sync passphrase does nothing? on Sat, 15 Oct 2016 19:09:45 GMT]]></title><description><![CDATA[<blockquote>
<p dir="auto">Synced passwords are encrypted.<br />
Other data only during transition between client and server.</p>
</blockquote>
<p dir="auto">That's how it used to work, not how it currently works.</p>
]]></description><link>https://forums.opera.com/post/108736</link><guid isPermaLink="true">https://forums.opera.com/post/108736</guid><dc:creator><![CDATA[mikecerm]]></dc:creator><pubDate>Sat, 15 Oct 2016 19:09:45 GMT</pubDate></item><item><title><![CDATA[Reply to Sync passphrase does nothing? on Sat, 15 Oct 2016 18:22:21 GMT]]></title><description><![CDATA[<p dir="auto">..the "<a href="http://sync.opera.com" target="_blank" rel="noopener noreferrer nofollow ugc">sync.opera.com</a>" website that is.</p>
]]></description><link>https://forums.opera.com/post/108733</link><guid isPermaLink="true">https://forums.opera.com/post/108733</guid><dc:creator><![CDATA[Deleted User]]></dc:creator><pubDate>Sat, 15 Oct 2016 18:22:21 GMT</pubDate></item><item><title><![CDATA[Reply to Sync passphrase does nothing? on Sat, 15 Oct 2016 18:02:56 GMT]]></title><description><![CDATA[<p dir="auto">How do you know? If you're correct, why does the dialog say "Encrypt all synced data..", and the "<a href="http://auth.opera.com" target="_blank" rel="noopener noreferrer nofollow ugc">auth.opera.com</a>" website tell users that bookmarks etc is encrypted?</p>
]]></description><link>https://forums.opera.com/post/108731</link><guid isPermaLink="true">https://forums.opera.com/post/108731</guid><dc:creator><![CDATA[Deleted User]]></dc:creator><pubDate>Sat, 15 Oct 2016 18:02:56 GMT</pubDate></item><item><title><![CDATA[Reply to Sync passphrase does nothing? on Fri, 14 Oct 2016 21:38:02 GMT]]></title><description><![CDATA[<blockquote>
<p dir="auto">As a user I would really appreciate to know wether it's encrypted all the way or Opera just dropped a few padlock icons to gain trust.</p>
</blockquote>
<p dir="auto">Synced passwords are encrypted.</p>
<p dir="auto">Other data only during transition between client and server.</p>
]]></description><link>https://forums.opera.com/post/108706</link><guid isPermaLink="true">https://forums.opera.com/post/108706</guid><dc:creator><![CDATA[leocg]]></dc:creator><pubDate>Fri, 14 Oct 2016 21:38:02 GMT</pubDate></item><item><title><![CDATA[Reply to Sync passphrase does nothing? on Fri, 14 Oct 2016 20:06:01 GMT]]></title><description><![CDATA[<p dir="auto">As a user I would really appreciate to know wether it's encrypted all the way or Opera just dropped a few padlock icons to gain trust.</p>
]]></description><link>https://forums.opera.com/post/108703</link><guid isPermaLink="true">https://forums.opera.com/post/108703</guid><dc:creator><![CDATA[Deleted User]]></dc:creator><pubDate>Fri, 14 Oct 2016 20:06:01 GMT</pubDate></item><item><title><![CDATA[Reply to Sync passphrase does nothing? on Fri, 14 Oct 2016 19:39:04 GMT]]></title><description><![CDATA[<blockquote>
<p dir="auto">Does option two (ALL SYNCED DATA) really mean that I'm the only one who can access my data?</p>
</blockquote>
<p dir="auto">I just tested it out, and that does appear to be true. If you try to view your synced data at <a href="http://sync.opera.com" target="_blank" rel="noopener noreferrer nofollow ugc">sync.opera.com</a> it now shows that the data is encrypted, where previously the data was visible even if you had chosen to encrypt all data with a passphrase.</p>
<p dir="auto">Still not sure I'd trust it. I mean, previously Opera claimed to encrypt the data though they weren't actually doing it. If they're that careless with user data (remember, they were also hacked recently), who knows whether they're actually encrypting it now or just saying that they are.</p>
]]></description><link>https://forums.opera.com/post/108701</link><guid isPermaLink="true">https://forums.opera.com/post/108701</guid><dc:creator><![CDATA[mikecerm]]></dc:creator><pubDate>Fri, 14 Oct 2016 19:39:04 GMT</pubDate></item><item><title><![CDATA[Reply to Sync passphrase does nothing? on Fri, 14 Oct 2016 19:01:53 GMT]]></title><description><![CDATA[<blockquote>
<p dir="auto">Does option two (ALL SYNCED DATA) really mean that I'm the only one who can access my data?</p>
</blockquote>
<p dir="auto">It should say 'encrypt synchronised passwords with your own passphrase'.</p>
]]></description><link>https://forums.opera.com/post/108700</link><guid isPermaLink="true">https://forums.opera.com/post/108700</guid><dc:creator><![CDATA[leocg]]></dc:creator><pubDate>Fri, 14 Oct 2016 19:01:53 GMT</pubDate></item><item><title><![CDATA[Reply to Sync passphrase does nothing? on Fri, 14 Oct 2016 18:23:36 GMT]]></title><description><![CDATA[<p dir="auto">As of today (version 40) the "Advanced Synchronisation Settings" dialog gives you two choices: "Encrypt synchronised password with your Opera credentials" or "Encrypt all synced data with your own sync passphrase".</p>
<p dir="auto">Does option two (ALL SYNCED DATA) really mean that I'm the only one who can access my data?</p>
]]></description><link>https://forums.opera.com/post/108696</link><guid isPermaLink="true">https://forums.opera.com/post/108696</guid><dc:creator><![CDATA[Deleted User]]></dc:creator><pubDate>Fri, 14 Oct 2016 18:23:36 GMT</pubDate></item><item><title><![CDATA[Reply to Sync passphrase does nothing? on Wed, 31 Aug 2016 11:59:31 GMT]]></title><description><![CDATA[<blockquote>
<p dir="auto">What is the passphrase and where does one get it from?</p>
</blockquote>
<p dir="auto">The passphrase is set up by the user itself.</p>
<blockquote>
<p dir="auto">I tried to set up this sync thing a couple of days ago and was never asked to create a passphrase</p>
</blockquote>
<p dir="auto">Then you shouldn't need to use one.</p>
<blockquote>
<p dir="auto">Now in the sync button, top right of the screen I'm being told that I need to enter my passphrase to complete the sync process.</p>
</blockquote>
<p dir="auto">So you login into Sync and it asks you for a passphrase?</p>
]]></description><link>https://forums.opera.com/post/105823</link><guid isPermaLink="true">https://forums.opera.com/post/105823</guid><dc:creator><![CDATA[leocg]]></dc:creator><pubDate>Wed, 31 Aug 2016 11:59:31 GMT</pubDate></item><item><title><![CDATA[Reply to Sync passphrase does nothing? on Wed, 31 Aug 2016 10:28:30 GMT]]></title><description><![CDATA[<p dir="auto">Stupid question alert?????<br />
What is the passphrase and where does one get it from? I tried to set up this sync thing a couple of days ago and was never asked to create a passphrase. Now in the sync button, top right of the screen I'm being told that I need to enter my passphrase to complete the sync process. Can anyone help please?</p>
]]></description><link>https://forums.opera.com/post/105817</link><guid isPermaLink="true">https://forums.opera.com/post/105817</guid><dc:creator><![CDATA[black-955-tiger]]></dc:creator><pubDate>Wed, 31 Aug 2016 10:28:30 GMT</pubDate></item><item><title><![CDATA[Reply to Sync passphrase does nothing? on Wed, 31 Aug 2016 02:47:30 GMT]]></title><description><![CDATA[<p dir="auto">I'm glad to hear that the "bug" has been fixed, but it is unfortunate that Opera has elected to fix it by leaving so much data unencrypted, rather than enabling full sync encryption as Google and Firefox have done. With Opera's sync servers having been recently compromised, it goes without saying that Opera's sync model is horribly insecure, and should be avoided completely. Had Google or Firefox's servers been compromised, no user data would have been put at risk.</p>
]]></description><link>https://forums.opera.com/post/105797</link><guid isPermaLink="true">https://forums.opera.com/post/105797</guid><dc:creator><![CDATA[mikecerm]]></dc:creator><pubDate>Wed, 31 Aug 2016 02:47:30 GMT</pubDate></item><item><title><![CDATA[Reply to Sync passphrase does nothing? on Mon, 29 Aug 2016 12:38:10 GMT]]></title><description><![CDATA[<p dir="auto">Hey mikecerm!<br />
There was bug in "Advanced configuration" dialog, wrong string/information about encryption. It has been fixed. Now there are two options named: "Encrypt synchronized passwords with you Opera credentials." and "Encrypt synchronized passwords with your own passphrase." Only passwords are encrypted. If you are using Opera 39 or later you have it fixed. If you have older Opera version, please upgrade to newest, Opera Stable 39, Opera Beta 40, Opera Developer 41.<br />
Cheers!</p>
]]></description><link>https://forums.opera.com/post/105685</link><guid isPermaLink="true">https://forums.opera.com/post/105685</guid><dc:creator><![CDATA[jryc]]></dc:creator><pubDate>Mon, 29 Aug 2016 12:38:10 GMT</pubDate></item><item><title><![CDATA[Reply to Sync passphrase does nothing? on Sun, 05 Jun 2016 06:40:59 GMT]]></title><description><![CDATA[<blockquote>
<p dir="auto">That 2-year-old FAQ is has nothing to say about the current state of sync.</p>
</blockquote>
<p dir="auto">Well, this is your opinion. I think that many of what is written there is still valid.</p>
<blockquote>
<p dir="auto">ou can't be serious if you think that it's okay that Opera is saying that data will be encrypted and then not doing it.</p>
</blockquote>
<p dir="auto">Is that so difficult for you to understand that sync data is encrypted during its tranfer between the computer and the sync server but it's not stored encrypted on the server except for passwords?</p>
<p dir="auto">Btw, found a newer comment from a former Opera employee regarding sync and security of data: <a href="http://www.opera.com/blogs/desktop/2015/09/opera-32-privacy-is-a-universal-right-2/#comment-2256300376" target="_blank" rel="noopener noreferrer nofollow ugc">http://www.opera.com/blogs/desktop/2015/09/opera-32-privacy-is-a-universal-right-2/#comment-2256300376</a></p>
]]></description><link>https://forums.opera.com/post/100674</link><guid isPermaLink="true">https://forums.opera.com/post/100674</guid><dc:creator><![CDATA[leocg]]></dc:creator><pubDate>Sun, 05 Jun 2016 06:40:59 GMT</pubDate></item><item><title><![CDATA[Reply to Sync passphrase does nothing? on Sun, 05 Jun 2016 02:33:33 GMT]]></title><description><![CDATA[<blockquote>
<p dir="auto">As he FAQ says,</p>
</blockquote>
<p dir="auto">That 2-year-old FAQ is has nothing to say about the current state of sync.</p>
<p dir="auto">You can't be serious if you think that it's okay that Opera is saying that data will be encrypted and then not doing it. You can't seriously think that it's okay that Opera copied the sync feature wholesale from Chromium, and removed all of the privacy and security, but left in place the the claims about privacy and security.</p>
]]></description><link>https://forums.opera.com/post/100657</link><guid isPermaLink="true">https://forums.opera.com/post/100657</guid><dc:creator><![CDATA[mikecerm]]></dc:creator><pubDate>Sun, 05 Jun 2016 02:33:33 GMT</pubDate></item><item><title><![CDATA[Reply to Sync passphrase does nothing? on Sun, 05 Jun 2016 02:14:14 GMT]]></title><description><![CDATA[<blockquote>
<p dir="auto">there was a change made to the setup, and they now say that they are encrypting everything, but they are not actually doing it.</p>
</blockquote>
<p dir="auto">As he FAQ says, data is not encrypted on the server, but only during the transfer between the computer and the server:</p>
<blockquote>
<p dir="auto">Everything is encrypted in transit between client and server. However, non-login data is not stored encrypted on the &gt;servers. If we later decide to sync sensitive private data, such as passwords, we will encrypt that as well.</p>
</blockquote>
<p dir="auto">On opera://sync-internals/, if you go to the tab 'Sync node browser' you may see what is encrypted.</p>
<blockquote>
<p dir="auto">So, if they are not encrypting everything, then why did the update the wording within the sync UI to say that they are?</p>
</blockquote>
<p dir="auto">Maybe something inherited from Chromium? Maybe a fault in the UI like i said? Or maybe it's being encrypted but only during the transfer like the FAQ says?</p>
]]></description><link>https://forums.opera.com/post/100655</link><guid isPermaLink="true">https://forums.opera.com/post/100655</guid><dc:creator><![CDATA[leocg]]></dc:creator><pubDate>Sun, 05 Jun 2016 02:14:14 GMT</pubDate></item><item><title><![CDATA[Reply to Sync passphrase does nothing? on Sat, 04 Jun 2016 23:08:50 GMT]]></title><description><![CDATA[<p dir="auto">That FAQ is so outdated that none of what it says is applicable at all the the current version of sync. As far as I'm concerned, the only line that matters is this one:</p>
<blockquote>
<p dir="auto">If we later decide to sync sensitive private data, such as passwords, we will encrypt that as well.</p>
</blockquote>
<p dir="auto">They are syncing all sorts of sensitive private data and not encrypting it. They didn't used to sync this stuff, and now they are, but they're not encrypting it like they said they would and, more importantly, <strong>like they currently say they are.</strong> Yes, the current version of the client -- not some 2 year old FAQ from before the sync feature was anywhere close to complete -- says that <strong>all sync data will be encrpyted using the passphrase.</strong> Furthermore, it didn't always say this. When version 32 was released 9 months ago, the first version to support passwords syncing, the setup said that only passwords would be encrypted. <a href="http://betanews.com/2015/09/15/opera-32-adds-password-sync-improved-bookmarks-view/" target="_blank" rel="noopener noreferrer nofollow ugc">http://betanews.com/2015/09/15/opera-32-adds-password-sync-improved-bookmarks-view/</a></p>
<p dir="auto">In the time since then, there was a change made to the setup, and they now say that they are encrypting everything, but they are not actually doing it. So, if they are not encrypting everything, then why did the update the wording within the sync UI to say that they are? Was it simply to mislead users into enabling the insecure sync feature? Was this done so that Opera's new Chinese masters could gather all that data? Is there some other explanation?</p>
]]></description><link>https://forums.opera.com/post/100648</link><guid isPermaLink="true">https://forums.opera.com/post/100648</guid><dc:creator><![CDATA[mikecerm]]></dc:creator><pubDate>Sat, 04 Jun 2016 23:08:50 GMT</pubDate></item><item><title><![CDATA[Reply to Sync passphrase does nothing? on Sat, 04 Jun 2016 20:40:27 GMT]]></title><description><![CDATA[<blockquote>
<p dir="auto">What about all of your other synced data?</p>
</blockquote>
<p dir="auto">As we discussed before and as the FAQ page says, synced data may not be encrypted on the server except for passwords and d some other more e sensitive data.</p>
<blockquote>
<p dir="auto">is this deliberate deception, or just a bug?</p>
</blockquote>
<p dir="auto">I would guess a fault in UI, the string should'n say that all data is encrypted.</p>
]]></description><link>https://forums.opera.com/post/100633</link><guid isPermaLink="true">https://forums.opera.com/post/100633</guid><dc:creator><![CDATA[leocg]]></dc:creator><pubDate>Sat, 04 Jun 2016 20:40:27 GMT</pubDate></item></channel></rss>