Derived from the password, using the email as salt.

Encrypts group data.

Is public in public groups.

Rotated on every member removal.

Only available to members of the group.

As opposed to the group key, isn't public in public groups.

Rotated on every member removal.

Encrypts group content.

Is encrypted with a password key in password-protected groups.

Rotated on every member removal.

Encrypts page data.

Rotated every 7 days, when a user is editing the page.

On a member removal, is set to rotate in the next user activity on the page.

Randomly generated for manual or pre-restore snapshots.

Same as page key for periodic snapshots.