Unencrypted

Unencrypted describes data that has not been transformed into an encrypted form using a cryptographic algorithm. When data is encrypted, it is converted into ciphertext that is unreadable without a corresponding decryption key; unencrypted data remains in plaintext and can be read by anyone who accesses it.

Unencrypted data can be found in various contexts: network communication without encryption (for example, HTTP without TLS); data stored on devices or in databases without encryption at rest; email sent in plain text; backups and portable media.

Risks associated with unencrypted data are significant. Because anyone who can access the data can read it, unencrypted information is vulnerable to interception, exposure during transit, theft, or inadvertent disclosure. This can lead to privacy harms, identity theft, financial loss, and compliance violations, especially for sensitive personal or organizational information.

Mitigation involves using encryption for data in transit and at rest, along with solid key management. Practices include implementing TLS for network traffic, encrypting stored data with full-disk or database-level encryption, restricting access, minimizing data exposure, and applying secure deletion and access controls. Regular risk assessments and security reviews help ensure appropriate protection levels.

See also: plaintext, cleartext, cryptography, encryption, data security.