I'm building a webapp storing the data in the cloud and some of our users are concerned about their privacy. They don't want their data stored in plaintext in the cloud and we're planning on offering an option to encrypt it before its sent to the server.<p>The main issue I have is how to manage the keys.<p>My plan is to not do anything weird or invent my own crypto or key management.<p>What I'm worried about primarily is when the user uses a new computer or it's destroyed.<p>How do they get new keys?<p>What do other services do here and are there any standards / best practices I can follow?
This can done using DID(Decentralized Identities). You can look at projects like Blockstack(<a href="https://blockstack.org" rel="nofollow">https://blockstack.org</a>). It helps in taking care of issuing keys and encryption. PGP could help as well. But may not be user friendly.