Some items cannot be decrypted

Operating system

Windows

Joplin version

3.5.13

Desktop version info

Joplin 3.5.13 (prod, win32)

Device: win32, Intel(R) Core(TM) i5-14600
Client ID: 3145ffa5fbef472693ad5fb37509e2a4
Sync Version: 3
Profile Version: 49
Keychain Supported: Yes
Alternative instance ID: -

Revision: 0c1511f

Backup: 1.5.1
Freehand Drawing: 4.2.0

Sync target

Joplin Cloud

What issue do you have?

Joplin is installed on 2 desktops, 2 laptops and an Android phone.

All of a sudden I'm getting the "Some Items Cannot Be Decrypted" banner on all Windows devices (Android device seems okay). I've clicked on "retry" multiple times and re-encrypted and resynced - no joy. Screenshot and log file uploaded.

Screenshots

Log file

syncReport-1776265912715.csv (18.8 KB)log.txt (38.1 KB)log.txt (46.5 KB)

I think this is likely caused by an issue with the encryption on Android, see my comment here https://github.com/laurent22/joplin/issues/14975#issuecomment-4246731347

I suspect based on the types and frequencies of the items which could not be decrypted, that most of those items are from the default welcome notebook (especially if you deleted it) when you did initial device setup on Android.

The good news is we have a known fix for the encryption issue, so I expect this will be fixed in Joplin 3.6 when it is released. Regardless, you will still need to clean up these items on the server though (by deleting the item with the matching id), in order to remove the sync errors. Be sure to make a jex backup on a known good client (seems like this is the Android one, as this has no errors) before deleting anything though.

Thank you. Are you saying I have to open every message, click on the information icon, and look for matching id's? Surely there must be a faster way, no?

What information icon do you mean? All of the ids are in the screenshot which you posted

But how do I find the associated note to delete it?

Oh you're using Joplin Cloud. I'm not sure you can remove those items yourself, as they need to be removed from the server. I think you will need @laurent to assist

So my next step is....?

Maybe the easiest would be to create a new profile as described below, and sync. This would fetch all the items again from the server and that should not include any corrupted item.

@laurent The OP says they have the banner on all Windows devices, which suggests the server items are corrupted. So I don't think re-syncing a new profile would help, as the corrupted items are clearly being propagated to all devices. I suspect this is due to the items being encrypted with an invalid encryption key (due to the Android encryption bug), so they will only work on the device which had the items before they were encrypted, while all other existing devices and new profiles wont be able to decrypt them.

The only solutions I see would be to manually remove those items from the server (which the user has no control over with Joplin Cloud), perform a local SQL hack so the client will delete them (which I'm sure you would not condone), or do a full reset from jex backup on all clients and server.

The final option is quite extreme considering the issue could be introduced again until Mobile: Fixes #14975: Fix E2EE password validation: Upgrade react-native-quick-crypto to v1.0.19 by personalizedrefrigerator · Pull Request #15103 · laurent22/joplin · GitHub is released, and additionally I'm not even sure the Victor plugin would be able to delete revisions for deleted notes, so you would probably have to clear down the user's data for them as well

I appreciate the responses above, and because of the differing opinions, am going to just sit tight for now. I'll keep watch on the thread in case a definitive solution is proposed.

Thanks again.

Hi:

Same problem here. I have a few resources and revisions that are on all my devices marked as not decryptable: Android, OSX and WIn11. They came after I installed a new android phone a couple of months back. Somehow due to the numerous threads about this annoying message for the past years this seems to become a "feature". Resetting all devices and re syncing is really not an alternative since the first sync is so painful and as some said above: since the issue replicated on all devices this clearly comes from Joplin Cloud.

Do I understand well: 3.6 should fix this or at least provide a means of cleaning up?

Thanks

Joplin 3.6 will stop this from happening again, but unfortunately it wont clean up existing items which can't be decrypted because of the issue

Thanks for clarification. So what is the best plan to get rid of this? In which of those multiple threads is the most effective solution?

Thanks

@jpservices Do you use Joplin Cloud, or another sync target?

@allan @jpservices I have come up with a method to delete these items which cannot be decrypted, see How to delete corrupt server items which cannot be decrypted for details. It is quite technical, so if you have any questions, feel free to post on that thread