Admin | Activate file encryption for mobile devices

Help Center

AI Assistant

Help Center AI Assistant is now available

Got questions about Lark? Use our AI chat to find the answers.

Click and hold to drag

Got It

Try Now

Admin | Activate file encryption for mobile devices

2 min read

Available with these plans:

Starter

Basic

Pro

Enterprise

To upgrade your Lark Plan or for more information, contact Support or your Customer Success Manager. The Lark Basic plan supports only specific countries and regions.

I. Intro

🔖

Who can perform these steps: Primary administrators or administrators with Terminal Security permissions.

As an administrator, you can enable and manage file encryption for mobile devices. Once organization documents are encrypted, organization members will not be able to open the documents by using third-party apps on mobile devices. Sharing and downloading files will also be restricted.

This feature allows organizations to guarantee security when transmitting photos, videos, and documents on the mobile app and prevent information leaks.

Note: This feature only applies to iOS and Android devices.

II. Steps

Enable File Encryption for the Lark mobile apps

You can configure document encryption for mobile devices for all members or selected departments, members, and user groups.

The priority of the mobile app file encryption rule: Member > user group > sub-department > department > organization.

Open the Lark Admin Console and click Security > Terminal Security > Mobile file encryption.

250px|700px|reset

Select the scope that the encryption settings will apply to. You can select Global or search for specific members, departments, or user groups.

After you select the scope, click Edit to the right of the Mobile file encryption section.

250px|700px|reset

Turn on Mobile File Encryption and click Save.

250px|700px|reset

View rule details

On the Mobile file encryption page, click Rule Settings in the upper-right corner.

Click View Details to the right of On or Off to see the members that are impacted by the rule.

250px|700px|reset

III. FAQs

Which organization documents can be encrypted on mobile devices?

Mobile file encryption can be applied to files in Lark Docs, Messenger, Mails, Calendar, Drive, and Favorites.

If a member belongs to different departments or user groups at the same time, and the mobile file encryption rules of those departments or user groups are different, which rule does the member follow?

If the different departments or user groups don't include each other, the strictest criteria policy is implemented, which means encryption is enabled if any policy requires it.

For example, member A belongs to both Department A and Department B. The mobile file encryption rule of Department A is "On", and the rule of Department B is "Off", then the member follows the stricter mobile file encryption rule, that is, the "open" rule of Department A.

If a member belongs to both a department and its sub-department, and the mobile file encryption rules of the department and the sub-department are different, which rule does the member follow?

The mobile file encryption rules follow the priority of member > user group > sub-department > department > organization.

For example, member A belongs to both Department A and its sub-department. The mobile file encryption rule for Department A is "On", and the rule for the sub-department is "Off", then the member follows the "Off" rule of the sub-department.

What is the difference between mobile file encryption and file access permissions?

Mobile file encryption enables images, videos, and documents to be encrypted at the system level so that members can only open and use them in Feishu and not in other, third-party apps.

File access permissions prevent users from downloading and exporting internal data. However, images, videos, and cached files can still be opened and accessed with third-party apps.

When mobile file encryption is enabled, will the desktop and web version of Feishu encrypt files as well?

This feature only works with files on the Lark mobile app. Encryption is currently not applied to files on the Lark desktop or web versions to allow effective cross-platform collaboration on these versions.

Once mobile file encryption is enabled, will files that members previously received be encrypted?

No. Only files that members receive after encryption is enabled will be encrypted. Files that members previously received will already be cached on their device, so they won't be encrypted.

Once encryption is enabled, what prompts will members working on the mobile app receive?

When attempting to download or save encrypted files on a mobile device, members will see the following message:

Due to your organization's security settings, this file cannot be saved locally.

When attempting to open encrypted files by using other, third-party apps on a mobile device, members will see the following message:

Due to your organization's security settings, this file is encrypted and cannot be shared or opened using third-party apps.