Encryption risks and protections

Microsoft 365 follows a control and compliance framework that focuses on risks to the service and to customer data. The service implements a large set of technology and process-based methods, referred to as controls, to mitigate these risks. Identification, evaluation, and mitigation of risks through controls is a continuous process.

The implementation of controls within layers of our cloud services such as facilities, network, servers, applications, users (such as Microsoft administrators), and data form a defense-in-depth strategy. The key to this strategy is that many different controls are implemented at different layers to protect against the same or similar risk scenarios. This multi-layered approach provides fail-safe protection in case a control fails.

Some risk scenarios and the currently available encryption technologies that mitigate them are listed in this table. In many cases, these scenarios are also mitigated by other controls implemented in Microsoft 365.

Encryption technology	Services	Key management	Risk scenario	Value
BitLocker	Exchange and SharePoint	Microsoft	Disks or servers are stolen or improperly recycled.	BitLocker provides a fail-safe approach to protect against loss of data due to stolen or improperly recycled hardware (server/disk).
Service encryption	SharePoint and OneDrive; Exchange	Microsoft	Internal or external hacker tries to access individual files/data as a blob.	The encrypted data can't be decrypted without access to keys. Helps to mitigate risk of a hacker accessing data.
Customer Key	SharePoint, OneDrive, and Exchange	Customer	N/A (This feature is designed as a compliance feature; not as a mitigation for any risk.)	Helps customers meet internal regulation and compliance obligations, and the ability to leave the service and revoke Microsoft's access to data
Transport Layer Security (TLS) between Microsoft 365 and clients	Exchange, SharePoint, OneDrive, Teams, and Viva Engage	Microsoft, Customer	Man-in-the-middle or other attack to tap the data flow between Microsoft 365 and client computers over Internet.	This implementation provides value to both Microsoft and customers and assures data integrity as it flows between Microsoft 365 and the client.
TLS between Microsoft datacenters	Exchange, SharePoint, and OneDrive	Microsoft	Man-in-the-middle or other attack to tap the customer data flow between Microsoft 365 servers located in different Microsoft datacenters.	This implementation is another method to protect data against attacks between Microsoft datacenters.
Azure Rights Management (Azure RMS) (included in Microsoft 365 or Azure Information Protection)	Exchange, SharePoint, and OneDrive	Customer	Data falls into the hands of a person who shouldn't have access to the data.	Azure Information Protection uses Azure RMS, which provides value to customers by using encryption, identity, and authorization policies to help secure files and email across multiple devices. Azure RMS provides configuration options where all emails originating from Microsoft 365 that match certain criteria (for example, all emails to a certain address) can be automatically encrypted before they get sent to another recipient.
S/MIME	Exchange	Customer	A person who isn't the intended recipient obtained an email.	S/MIME helps ensure that only the intended recipient can decrypt an encrypted email.
Microsoft Purview Message Encryption	Exchange, SharePoint	Customer	A person who isn't the intended recipient obtained an email and its protected attachments.	Message encryption lets you configure your tenant so that emails originating from Microsoft 365 that match certain criteria (for example, all emails to a certain address) are automatically encrypted before they're sent.
Simple Mail Transfer Protocol (SMTP) TLS with partner organization	Exchange	Customer	Email is intercepted via a man-in-the-middle or other attack while in transit from a Microsoft 365 tenant to a partner organization.	Allows you to send and receive all emails between your Microsoft 365 tenant and your partner's email organization inside an encrypted SMTP channel.

Tip

If you're not an E5 customer, use the 90-day Microsoft Purview solutions trial to explore how additional Purview capabilities can help your organization manage data security and compliance needs. Start now at the Microsoft Purview compliance portal trials hub. Learn details about signing up and trial terms.

Encryption technologies available in multitenant environments

Encryption technology	Implemented by	Key exchange algorithm and strength	Key management*	Federal Information Processing Standards (FIPS) 140-2 validated
BitLocker	Exchange	Advanced Encryption Standard (AES) 256-bit	AES external key is stored in a secret safe and in the registry of the Exchange server. The secret safe is a secured repository that requires high-level elevation and approvals to access. Access can be requested and approved only by using an internal tool called Lockbox. The AES external key is also stored in the Trusted Platform Module in the server. A 48-digit numerical password is stored in Active Directory and protected by Lockbox.	Yes
	SharePoint	AES 256-bit	AES external key is stored in a secret safe. The secret safe is a secured repository that requires high-level elevation and approvals to access. Access can be requested and approved only by using an internal tool called Lockbox. The AES external key is also stored in the Trusted Platform Module in the server. A 48-digit numerical password is stored in Active Directory and protected by Lockbox.	Yes
	Skype for Business	AES 256-bit	AES external key is stored in a secret safe. The secret safe is a secured repository that requires high-level elevation and approvals to access. Access can be requested and approved only by using an internal tool called Lockbox. The AES external key is also stored in the Trusted Platform Module in the server. A 48-digit numerical password is stored in Active Directory and protected by Lockbox.	Yes
Service encryption	SharePoint	AES 256-bit	The keys used to encrypt the blobs are stored in the SharePoint Content Database. The SharePoint Content Database is protected by database access controls and encryption at rest. Encryption is performed using transparent data encryption (TDE) in Azure SQL Database. These secrets are at the service level for SharePoint, not at the tenant level. These secrets (sometimes referred to as the master keys) are stored in a separate secure repository called the Key Store. TDE provides security at rest for both the active database and the database backups and transaction logs. When customers provide the optional key, the key is stored in Azure Key Vault, and the service uses the key to encrypt a tenant key, which is used to encrypt a site key, which is then used to encrypt the file level keys. Essentially, a new key hierarchy is introduced when the customer provides a key.	Yes
	Skype for Business	AES 256-bit	Each piece of data is encrypted using a different randomly generated 256-bit key. The encryption key is stored in a corresponding metadata XML file, which is encrypted by a per-conference master key. The master key is also randomly generated once per conference.	Yes
	Exchange	AES 256-bit	Each mailbox is encrypted using a data encryption policy that uses encryption keys controlled by Microsoft or by the customer (when Customer Key is used).	Yes
TLS between Microsoft 365 and clients/partners	Exchange	Opportunistic TLS supporting multiple cipher suites	The TLS certificate for Exchange (outlook.office.com) is a 2048-bit SHA256RSA certificate issued by Baltimore CyberTrust Root. The TLS root certificate for Exchange is a 2048-bit SHA1RSA certificate issued by Baltimore CyberTrust Root.	Yes, when TLS 1.2 with 256-bit cipher strength is used
	SharePoint	TLS 1.2 with AES 256 Data Encryption in OneDrive and SharePoint	The TLS certificate for SharePoint (*.sharepoint.com) is a 2048-bit SHA256RSA certificate issued by Baltimore CyberTrust Root. The TLS root certificate for SharePoint is a 2048-bit SHA1RSA certificate issued by Baltimore CyberTrust Root.	Yes
	Microsoft Teams	TLS 1.2 with AES 256 Frequently asked questions about Microsoft Teams – Admin Help	The TLS certificate for Microsoft Teams (teams.microsoft.com, edge.skype.com) is a 2048-bit SHA256RSA certificate issued by Baltimore CyberTrust Root. The TLS root certificate for Microsoft Teams is a 2048-bit SHA256RSA certificate issued by Baltimore CyberTrust Root.	Yes
TLS between Microsoft datacenters	All Microsoft 365 services	TLS 1.2 with AES 256 Secure Real-time Transport Protocol (SRTP)	Microsoft uses an internally managed and deployed certification authority for server-to-server communications between Microsoft datacenters.	Yes
Azure Rights Management (included in Microsoft 365 or Azure Information Protection)	Exchange	Supports Cryptographic Mode 2, an updated and enhanced RMS cryptographic implementation. It supports RSA 2048 for signature and encryption, and SHA-256 for hash in the signature.	Managed by Microsoft.	Yes
	SharePoint	Supports Cryptographic Mode 2, an updated and enhanced RMS cryptographic implementation. It supports RSA 2048 for signature and encryption, and SHA-256 for signature.	Managed by Microsoft, which is the default setting; or Customer-managed, which is an alternative to Microsoft-managed keys. Organizations that have an IT-managed Azure subscription can use bring your own key (BYOK) and log its usage at no extra charge. For more information, see Implementing bring your own key. In this configuration, nCipher Hardware Security Modules (HSMs) are used to protect your keys.	Yes
S/MIME	Exchange	Cryptographic Message Syntax Standard 1.5 (Public Key Cryptography Standard (PKCS) #7)	Depends on the customer-managed public key infrastructure deployed. The customer manages the keys, and Microsoft never has access to the private keys used for signing and decryption.	Yes, when configured to encrypt outgoing messages with 3DES or AES256
Microsoft Purview Message Encryption	Exchange	Same as Azure RMS (Cryptographic Mode 2 - RSA 2048 for signature and encryption, and SHA-256 for signature)	Uses Azure Information Protection as its encryption infrastructure. The encryption method used depends on where you obtain the RMS keys used to encrypt and decrypt messages.	Yes
SMTP TLS with partner organization	Exchange	TLS 1.2 with AES 256	The TLS certificate for Exchange (outlook.office.com) is a 2048-bit SHA-256 with RSA encryption certificate issued by DigiCert Cloud Services CA-1. The TLS root certificate for Exchange is a 2048-bit SHA-1 with RSA encryption certificate issued by GlobalSign Root CA – R1. For security reasons, our certificates do change from time to time.	Yes, when TLS 1.2 with 256-bit cipher strength is used

*TLS certificates referenced in this table are for US datacenters; non-US datacenters also use 2048-bit SHA256RSA certificates.

Encryption technologies available in Government cloud community environments

Encryption Technology	Implemented by	Key Exchange Algorithm and Strength	Key Management*	FIPS 140-2 Validated
BitLocker	Exchange	AES 256-bit	AES external key is stored in a secret safe and in the registry of the Exchange server. The secret safe is a secured repository that requires high-level elevation and approvals to access. Access can be requested and approved only by using an internal tool called Lockbox. The AES external key is also stored in the Trusted Platform Module in the server. A 48-digit numerical password is stored in Active Directory and protected by Lockbox.	Yes
	SharePoint	AES 256-bit	AES external key is stored in a secret safe. The secret safe is a secured repository that requires high-level elevation and approvals to access. Access can be requested and approved only by using an internal tool called Lockbox. The AES external key is also stored in the Trusted Platform Module in the server. A 48-digit numerical password is stored in Active Directory and protected by Lockbox.	Yes
	Skype for Business	AES 256-bit	AES external key is stored in a secret safe. The secret safe is a secured repository that requires high-level elevation and approvals to access. Access can be requested and approved only by using an internal tool called Lockbox. The AES external key is also stored in the Trusted Platform Module in the server. A 48-digit numerical password is stored in Active Directory and protected by Lockbox.	Yes
Service encryption	SharePoint	AES 256-bit	The keys used to encrypt the blobs are stored in the SharePoint Content Database. The SharePoint Content Databases is protected by database access controls and encryption at rest. Encryption is performed using TDE in Azure SQL Database. These secrets are at the service level for SharePoint, not at the tenant level. These secrets (sometimes referred to as the master keys) are stored in a separate secure repository called the Key Store. TDE provides security at rest for both the active database and the database backups and transaction logs. When customers provide the optional key, the Customer Key is stored in Azure Key Vault. The service uses the key to encrypt a tenant key, which is used to encrypt a site key, which is then used to encrypt the file level keys. Essentially, a new key hierarchy is introduced when the customer provides a key.	Yes
	Skype for Business	AES 256-bit	Each piece of data is encrypted using a different randomly generated 256-bit key. The encryption key is stored in a corresponding metadata XML file. A per-conference master key encrypts this XML file. The master key is also randomly generated once per conference.	Yes
	Exchange	AES 256-bit	Each mailbox is encrypted using a data encryption policy that uses encryption keys controlled by Microsoft or by the customer (when Customer Key is used).	Yes
TLS between Microsoft 365 and clients/partners	Exchange	Opportunistic TLS supporting multiple cipher suites	The TLS certificate for Exchange (outlook.office.com) is a 2048-bit SHA256RSA certificate issued by Baltimore CyberTrust Root. The TLS root certificate for Exchange is a 2048-bit SHA1RSA certificate issued by Baltimore CyberTrust Root.	Yes, when TLS 1.2 with 256-bit cipher strength is used
	SharePoint	TLS 1.2 with AES 256	The TLS certificate for SharePoint (*.sharepoint.com) is a 2048-bit SHA256RSA certificate issued by Baltimore CyberTrust Root. The TLS root certificate for SharePoint is a 2048-bit SHA1RSA certificate issued by Baltimore CyberTrust Root.	Yes
	Microsoft Teams	Frequently asked questions about Microsoft Teams – Admin Help	The TLS certificate for Microsoft Teams (teams.microsoft.com; edge.skype.com) is a 2048-bit SHA256RSA certificate issued by Baltimore CyberTrust Root. The TLS root certificate for Microsoft Teams is a 2048-bit SHA256RSA certificate issued by Baltimore CyberTrust Root.	Yes
TLS between Microsoft datacenters	Exchange, SharePoint, Skype for Business	TLS 1.2 with AES 256	Microsoft uses an internally managed and deployed certification authority for server-to-server communications between Microsoft datacenters.	Yes
		Secure Real-time Transport Protocol (SRTP)
Azure Rights Management Service	Exchange	Supports Cryptographic Mode 2, an updated and enhanced RMS cryptographic implementation. It supports RSA 2048 for signature and encryption, and SHA-256 for hash in the signature.	Managed by Microsoft.	Yes
	SharePoint	Supports Cryptographic Mode 2, an updated and enhanced RMS cryptographic implementation. It supports RSA 2048 for signature and encryption, and SHA-256 for hash in the signature.	Managed by Microsoft, which is the default setting; or Customer-managed (also known as BYOK), which is an alternative to Microsoft-managed keys. Organizations that have an IT-managed Azure subscription can use BYOK and log its usage at no extra charge. For more information, see Implementing bring your own key. In the BYOK scenario, nCipher HSMs are used to protect your keys.	Yes
S/MIME	Exchange	Cryptographic Message Syntax Standard 1.5 (PKCS #7)	Depends on the public key infrastructure deployed.	Yes, when configured to encrypt outgoing messages with 3DES or AES-256.
Office 365 Message Encryption	Exchange	Same as Azure RMS (Cryptographic Mode 2 - RSA 2048 for signature and encryption, and SHA-256 for hash in the signature)	Uses Azure RMS as its encryption infrastructure. The encryption method used depends on where you obtain the RMS keys used to encrypt and decrypt messages. If you use Azure RMS to obtain the keys, Cryptographic Mode 2 is used. If you use Active Directory (AD) RMS to obtain the keys, either Cryptographic Mode 1 or Cryptographic Mode 2 is used. The method used depends on your on-premises AD RMS deployment. Cryptographic Mode 1 is the original AD RMS cryptographic implementation. It supports RSA 1024 for signature and encryption and supports SHA-1 for signature. All current versions of RMS support this mode, except for BYOK configurations that use HSMs.	Yes
SMTP TLS with partner organization	Exchange	TLS 1.2 with AES 256	The TLS certificate for Exchange (outlook.office.com) is a 2048-bit SHA-256 with RSA Encryption certificate issued by DigiCert Cloud Services CA-1. The TLS root certificate for Exchange is a 2048-bit SHA-1 with RSA Encryption certificate issued by GlobalSign Root CA – R1. For security reasons, our certificates do change from time to time.	Yes, when TLS 1.2 with 256-bit cipher strength is used.

*TLS certificates referenced in this table are for US datacenters; non-US datacenters also use 2048-bit SHA256RSA certificates.