A method of operating a computing device, the method comprising: generating a first data access application key for use by a first data access application running on the computing device to enable decryption of first data that is stored in encrypted form on the computing device using said first data access application key in order to provide a user of the computing device with access to the first data, wherein the first data access application key is useable by the first data access application to decrypt a key that was used to encrypt the first data in order to enable the first data access application to decrypt the first data, wherein said first data access application key is generated using an identifier of said first data access application and an application key that is specific to at least one of the computing device and the user of the computing device, the application key being different from the identifier of the first data access application, generating a second data access application key for use by a second data access application running on the computing device to enable decryption of second data that is stored in encrypted form on the computing device using the second data access application key in order to provide a user of the computing device with access to the second data, wherein the second data access application key is generated using an identifier of the second data access application and the application key that is specific to at least one of the computing device and the user of the computing device, the application key being different from the identifier of the second data access application, wherein the first data access application key is different from the second data access application key, and wherein the application key that is specific to at least one of the computing device and the user of the computing device is received at the computing device from a remote data store. generating a first data access application key for use by a first data access application running on the computing device to enable decryption of first data that is stored in encrypted form on the computing device using said first data access application key in order to provide a user of the computing device with access to the first data, wherein the first data access application key is useable by the first data access application to decrypt a key that was used to encrypt the first data in order to enable the first data access application to decrypt the first data, wherein said first data access application key is generated using an identifier of said first data access application and an application key that is specific to at least one of the computing device and the user of the computing device, the application key being different from the identifier of the first data access application, generating a second data access application key for use by a second data access application running on the computing device to enable decryption of second data that is stored in encrypted form on the computing device using the second data access application key in order to provide a user of the computing device with access to the second data, wherein the second data access application key is generated using an identifier of the second data access application and the application key that is specific to at least one of the computing device and the user of the computing device, the application key being different from the identifier of the second data access application, wherein the first data access application key is different from the second data access application key, and wherein the application key that is specific to at least one of the computing device and the user of the computing device is received at the computing device from a remote data store.