pCloud Encryption is the simplest and most secure way to encrypt data.
With pCloud’s unique client-side encryption functionality users’ files are safely hidden from any unauthorized access. pCloud Encryption lets users protect their confidential files with high-end security, making it as easy as placing a file in a folder. pCloud's security application encrypts data on user's computer, and uploads only the encrypted version to the servers. Files never leave user's device, so there is no way that anyone receives sensitive information in a plain version. We apply zero-knowledge privacy, meaning that encryption keys are not uploaded or stored on our servers, and we are incapable of viewing user files. The encryption key (Crypto Pass) is only available to the one who creates it, i.e. the user.
We are different than other security-led cloud storage providers.
pCloud is the first cloud storage provider to offer both encrypted and non-encrypted folders in the same account. Although at first thought it is the most natural approach to just encrypt everything, the downside is that when servers do not understand the data, they cannot help you work with your files. You can't expect server support for generating thumbnail previews of images, transcoding of media files so they are playable in the cloud, creating and extracting archives, and similar operations that cloud users need. That is why, with pCloud, you can choose which files to encrypt and lock, and which ones to store in their natural state and apply file operations on.
pCloud makes the best of both worlds.
We did our encryption in the most user-friendly way - encrypted files will be visible and usable in your storage only when you enter your encryption password (Crypto Pass) and unlock them. Otherwise, as soon as you click the Lock button they are no longer accessible locally by anyone else. You are the only one who holds the key. Even we, as a service provider, do not have access to your encrypted files. This is in contrast to embedding encryption in so called "Sync" clients that would still upload encrypted data to servers but would keep data in plain text on user's computer so anybody who has access to the computer would see it (e.g. when you lose your laptop). pCloud Encryption does not have such a vulnerability.
The strictly technical aspects.
We use industry standard 4096-bit RSA for users' private keys and 256-bit AES for per-file and per-folder keys. We do data authentication in a different way compared to most competitors. Authentication is the process of verifying that you decrypted data the right data. Many experts consider it a mandatory part of encryption.
Authentication is done by calculating cryptographic hash of the data during encryption and decryption, and comparing the results. There are two popular approaches to that: one is to calculate the checksum of the whole file, another is to calculate checksums of small blocks in the file. The downside of the first approach is that you need to have the whole file in order to authenticate it, which may not be the case. Partial file modifications are also problematic in this case and might also require access to the full file. The second approach is vulnerable to several types of attacks. Most likely, the service provider may construct a version of the file that never really existed by combining different small blocks in different ways.
In pCloud Encryption we solve this problem by using a tree of hashes (also called Merkle tree, similar to what Bitcoin is using as a central part in its protocol).
By now, the combination of all keys and security layers that pCloud uses has proven to be unbreakable.
FAQs
Regardless of what type of account you have at pCloud, we make sure your data stays secure. All of the files you store in pCloud are secured with 256-bit AES method of encrypting during and after transfer. In addition, upon transfer, pCloud also applies TLS/SSL channel protection.
What are the security features of pCloud? ›
pCloud is the secure place in the cloud to store, sync and share files. The files you store in pCloud are secured with 256-bit AES encryption during and after transfer. To further guarantee your files' safety, pCloud uses TLS/SSL protocol, applied when information is transferred from your device to the pCloud servers.
How private is pCloud? ›
Files never leave user's device, so there is no way that anyone receives sensitive information in a plain version. We apply zero-knowledge privacy, meaning that encryption keys are not uploaded or stored on our servers, and we are incapable of viewing user files.
What features does full disk encryption have? ›
Full-disk encryption is the process of encoding all user data on an Android device using an encrypted key. Once a device is encrypted, all user-created data is automatically encrypted before committing it to disk and all reads automatically decrypt data before returning it to the calling process.
Can information in shared cloud storage be encrypted? ›
The most secure way to use a cloud storage service is to encrypt your files before they leave your computer. If you hold the encryption key, no one else will be able to easily decrypt your files and therefore read or use your personal information.
Is pCloud encrypted by default? ›
Regardless of what type of account you have at pCloud, we make sure your data stays secure. All of the files you store in pCloud are secured with 256-bit AES method of encrypting during and after transfer. In addition, upon transfer, pCloud also applies TLS/SSL channel protection.
Does pCloud have end to end encryption? ›
pCloud is a secure cloud storage service that permits users to store files online using end-to-end encryption.
Do you need pCloud encryption? ›
With pCloud Encryption you can protect your most sensitive information, your private documents, on any device. No one, even pCloud's administrators, will have access to your content. You hold the key to your online privacy.
Is pCloud safer than Google Drive? ›
Google Drive uses TLS in transit and 128-bit AES at rest. pCloud uses 256-bit AES at rest and& like Google Drive& TLS in transit. Clearly& your data is more secure with pCloud than it is with Google Drive.
Does pCloud look at your files? ›
pCloud as a service provider, is unable to decrypt any hosted data, consequently has zero-knowledge about your files. Even if any authorities require access to your data in the cloud, we have no way to give them such, because it is not accessible by us.
Recommendation: You can usually safely turn on disk encryption with HDDs, as it likely won't cause many problems regarding CPU load even within HCI . However the performance penalty in throughput and IOPS can be quite tremendous compared to non-encrypted operation.
What are the disadvantages of full disk encryption? ›
Drawbacks of full-disk encryption
If users forget their password and lose their recovery key, the device will be inaccessible to them, and they will be locked out just like an intruder. Data in transit isn't protected, so data shared between devices and through email is still vulnerable to hacking.
Can full disk encryption be cracked? ›
In fact, most encryption is not cracked due to a flaw in the encryption algorithm itself but because of a careless mistake in its implementation. Due to how complex encryption is, such mistakes are easy to make, even by experts in the field.
What is the safest cloud drive? ›
These are the six most secure cloud storage solutions:
- IDrive: Best overall secure cloud storage solution.
- pCloud: Best for extended storage functionalities.
- OneDrive: Best for Microsoft systems integration.
- Internxt: Best option for secure file sharing features.
- Sync.com: Best for ease of use and administration.
Encryption is a crucial aspect of data protection in the cloud. It ensures that even if unauthorized individuals gain access to the stored data, they cannot decipher or use it without the encryption key.
What is the best way to encrypt cloud storage? ›
Cryptomator is a simple tool for digital self-defense. It allows you to protect your cloud data by yourself and independently. Most cloud providers encrypt data only during transmission or they keep the keys for decryption for themselves. These keys can be stolen, copied, or misused.
Can I trust pCloud? ›
Because pCloud is located in Switzerland and has to adhere to strict privacy laws, the service is extremely trustworthy. It also states that it doesn't sell user data to third parties, making it a better option for those concerned about their privacy. Is pCloud Better Than Google Drive? For security and privacy, yes.
What are the restrictions on pCloud? ›
Basic accounts can share folders with up to 25,000 subfolders or 150,000 files. Premium/Business accounts can share folders with up to 50,000 subfolders or 300,000 files.
