A method is for the encryption and decryption of data by various users, in which a user is assigned a data key for encrypting and decrypting data. A data processing facility is designed to carry out the method and a storage medium is designed to store information for carrying out the method on a data processing facility. A first step involves the performance of a security check in order to ascertain the identity of the user. A second step involves a data key which cannot be viewed by the user, being assigned on the basis of the result of the security check. In this case, various users who, by way of example, can be associated with a common user group, can be assigned the same data key.