In every case with Scram’s software, you hold your own encryption key. This is the master key from which all sub-keys are created. Each ScramFS instance has its own master encryption key.

Of course, you are free to keep that master key as private or public as you wish – but of course, if you make it public, you might as well not encrypt.

Naturally, if you value your privacy and the confidentiality of your data, you will keep your encryption keys private.