How to encrypt or decrypt shared folders on Synology NAS

Shared folders are a fantastic way to offer multi-site file access to folders and files. They’re mandatory for storing all your files on a Synology NAS, even if you’re the only person who will have access to the NAS. This guide will show you how to secure shared folders through encryption.

• What is a shared folder?
• How to encrypt a shared folder
• How to obtain your encryption key
• How to decrypt a shared folder

What is a shared folder?

As aforementioned, a shared folder is how Synology’s DiskStation Manager handles general storage on a branded NAS. There are two types of shared folders on a Synology NAS:

• Shared Folder – This basic directory allows you to store files and other folders on the NAS. It’s required for any files to be stored.
• Hybrid Shared Folder – This is what’s used for storing files and folders on Synology’s C2 Storage. By utilizing a Hybrid Shared Folder, you can connect local storage to the C2 cloud service.

For added protection, one can encrypt a shared solder and this guide will show you how to do so, as well as mount it to gain access.

How to encrypt a shared folder

In order to encrypt a shared folder on a Synology NAS, you need to be part of the administrator user group. It’s possible to encrypt new or existing folders, creating a randomly generated key, which is then required to mount and decrypt the shared folder.

We strongly recommend saving this key in a safe place else you will lose access to the encrypted shared folder.

How to encrypt a new shared folder

1. Log into your Synology NAS.
2. Go to Control Panel > Shared Folder.

3. Click on Create.
4. Enter a name and description.
5. Select a storage pool to create the Shared Folder. (Not required if you only have one.)
6. Check Encrypt this shared folder.

7. Enter the encryption key in the two fields.

8. Check Add encryption key to Key Manager if you wish DSM to automatically use the encryption key when mounting the folder for access.

How to encrypt an existing shared folder

1. Log into your Synology NAS.
2. Go to Control Panel > Shared Folder.

3. Select a shared folder.
4. Click Edit.
5. Choose Encryption.
6. Check Encrypt this shared folder.

7. Enter the encryption key in the two fields.

8. Check Add encryption key to Key Manager if you wish DSM to automatically use the encryption key when mounting the folder for access.

How to obtain your encryption key

Should you need to gain access to your encryption key after encrypting a shared folder, you can follow these simple steps:

1. Go to Control Panel > Shared Folder.
2. Click Encryption.
3. Choose Export key.

How to decrypt a shared folder

You can mount encrypted shared folders on a Synology NAS but access can be provided to everyone who has adequate privileges through decryption. Only mounted encrypted shared folders can be decrypted.

1. Go to Control Panel > Shared Folder.
2. Select the shared folder.
3. Click Edit.
4. Go to the Encryption tab.
5. Uncheck Encrypt this shared folder.