Methods, systems and computer program products are provided for controlling
access to digital data in a file by obtaining a passphrase from a user and generating
a personal key based on the obtained passphrase. A file encryption key is generated
and the digital data in the file encrypted with the file encryption key to provide
an encrypted file. The file encryption key is encrypted with the personal key to
provide an encrypted file encryption key. A file header containing the encrypted
file encryption key and associated with the encrypted file. The encrypted file
and the file header associated with the encrypted file may be stored at a file server.