Client-side encryption
Contents, names and file structure are encrypted on the user’s device before the data leaves it.
Security & Zero-Knowledge
Protection starts on your device.
Nodrive encrypts data before it reaches the storage selected by the user and clearly states the limits of its Beta security model.
Zero-knowledge model
The Beta keeps data locally or sends encrypted blocks to storage selected by the user. Fiscalbox does not offer Hosted storage for user content.
Local key protection
The User Key is unlocked locally with a password-derived key. In the current Beta, the wrapped User Key remains on the device and is not held in Nodrive cloud escrow.
Nodrive authentication
The current technical model uses OPAQUE so the password is not sent to the server in plaintext. Backend communications use TLS.
Your storage
With Google Drive, the user authorises access through OAuth. Nodrive does not receive the Google password and the authorisation token remains on the user’s PC.
Declared limits
A compromised device, weak password, malware, keyloggers or files created outside Nodrive can reduce the model’s protections. No claim guarantees absolute invulnerability.