Microsoft Double Key Encryption vs. eperi sEcure: Which solution really protects your data?
Data security is a key issue for companies today. Sensitive information must be optimally protected, especially in the cloud. Microsoft offers an encryption solution in the form of Double Key Encryption (DKE), but is this really the best choice? In this article, we show you why eperi sEcure is the better solution for your company.
Microsoft Double Key Encryption: Well-intentioned, but impractical
Microsoft DKE is based on a two-key principle: one key is held by Microsoft, the second remains with the company. This means that the company retains partial control over its data. But there are major disadvantages:
- Limited functionality: Microsoft itself recommends using DKE only to a limited extent, as it restricts many Microsoft 365 services. Functions such as search, collaboration in Office web apps and content indexing are completely eliminated. This can lead to employees having to search for documents for longer, workflows being slowed down and general productivity decreasing.
- Higher costs: The DKE function is only included in the expensive Microsoft 365 E5 license. (A cheaper E3 license in combination with eperi sEcure is more economical and more powerful).
- Lack of flexibility: DKE only works with Microsoft applications and cannot be used as a holistic security solution for hybrid cloud landscapes.
- No complete protection: External applications or services that are not compatible with Microsoft Information Protection (MIP) cannot perform any actions on encrypted data.
- Limited data sovereignty: As one of the keys is held by Microsoft, there is always a residual risk that Microsoft - or government agencies - will gain access to the data.
- Possible points of attack for cyber criminals: As part of the key management is carried out via Microsoft, this could be an attractive target for hacker attacks. If the Microsoft key is compromised, there is a risk that encrypted data will no longer be adequately protected. In the past, there have already been attacks on cloud service providers in which hackers have gained access to encrypted data by exploiting vulnerabilities in key management.
eperi sEcure: Maximum security without restrictions
eperi sEcure was specially developed to encrypt data before it leaves the company environment. This means that the company retains full control at all times - without compromising usability.
Advantages of eperi sEcure:
- Functionality is retained: Important Microsoft 365 services such as search, content indexing and collaboration remain fully usable despite encryption. This is made possible by eperi sEcure's patented cloud adapter technology, which protects data in a way that ensures full use of all Office functions. This allows companies to maintain their usual workflows while ensuring maximum security.
- Complete control over keys and data: All encryption processes and keys lie exclusively with the company (key sovereignty).
- Maximum data sovereignty: Companies retain complete control over their data without third parties such as Microsoft being involved. This means that no external access to critical company information is possible.
- Greater protection against cyber attacks: As all encryption remains within the company, there is no central point of attack as with DKE.
- Cost efficiency: A Microsoft 365 E3 license with eperi sEcure is cheaper than the E5 license with DKE - with better functionality at the same time.
- Independence from Microsoft: eperi sEcure can be used as a security layer for hybrid cloud landscapes - not just for Microsoft applications.
Comparison: Microsoft DKE vs. eperi sEcure
|
Function |
Microsoft DKE |
eperi sEcure |
|
Search & content indexing |
❌ Not available |
✅ Fully functional |
|
Collaboration in Office web apps |
❌ Not possible |
✅ Unrestricted |
|
Complete control over keys |
❌ Partially (Microsoft holds a key) |
✅ Yes (only the company has access) |
|
Maximum data sovereignty |
❌ Restricted (Microsoft holds a key) |
✅ Complete (only the company has access) |
|
Protection against cyber attacks |
❌ Potential risk from Microsoft keys |
✅ Maximum security through complete control |
|
Support for mobile devices |
❌ Restricted |
✅ Complete |
|
Costs |
❌ High E5 license costs |
✅ Cheaper with an E3 license |
|
Use for hybrid cloud landscapes |
❌ Only for Microsoft services |
✅ Cross-platform |
Conclusion: Maximum security and efficiency with eperi sEcure
While Microsoft DKE limits companies in terms of functionality and flexibility, eperi sEcure offers a powerful, cost-efficient solution that can be used without restrictions. If you want to protect sensitive data without sacrificing convenience and productivity, eperi sEcure is the best choice.
Rely on eperi sEcure - for maximum security without compromise
Knowledge that protects - your next measure for more data security
On our download page you will find free white papers and factsheets on data protection, data encryption and compliance - especially for IT managers and decision-makers.
Get compact knowledge, strategic recommendations and practical tips to effectively protect your data and securely comply with regulatory requirements such as GDPR, NIS2 and DORA.
