gen-briefly-explain-forward-secrecy-and-one-common-misconception-3946

Briefly explain forward secrecy and one common misconception about it.

## Forward Secrecy **Forward secrecy** (or "perfect forward secrecy") is a cryptographic property where each session uses unique, temporary encryption keys that are never stored long-term. Even if an attacker later compromises the server's private key, they cannot decrypt past communications because those sessions were encrypted with ephemeral keys that no longer exist. ## Common Misconception **Misconception**: "Forward secrecy protects my data if my password is stolen." **Reality**: Forward secrecy only protects against compromise of the *server's* long-term cryptographic keys. It does **not** protect against: - Stolen passwords or credentials - Active man-in-the-middle attacks during the session - Endpoint compromise (malware on your device) - Data breaches of decrypted information stored on servers Forward secrecy is about protecting the *transport layer* of past communications, not authentication or data at rest.