End-to-end encryption: the difference between "trusting" and not having to
Almost every cloud service says "your files are encrypted." That phrase can mean very different things. Here's the real difference, and how we implement it in Filetico.
The three types of "encryption" cloud services advertise
They aren't the same thing, and the difference matters.
Encryption in transit
Protects your data while it travels between your device and the server (the same HTTPS any serious website uses). Once it reaches the server, it travels "naked".
Encryption at rest
The provider encrypts files once they're already stored on its disks. The catch: the provider holds the key, so it can decrypt them whenever it wants.
End-to-end encryption
The file is encrypted on your own device, before a single byte is uploaded, using a key derived from a password only you know. The server never sees the original content.
How it works in Filetico
You mark a folder as encrypted and choose a password. Your device derives an AES-256 key with PBKDF2-HMAC-SHA256 (210,000 iterations) using the Web Crypto API — that key never leaves your browser or app. Each file is individually encrypted with AES-256-GCM before upload; our servers only ever receive and store the encrypted result.
The practical result: if anyone accessed our servers — a malicious employee, an external attacker, or a misdirected legal order — they'd only find blocks of encrypted data, with no way to read them without your password. See the full technical breakdown, including what metadata stays unencrypted and the model's known limitations, on our security page.
Frequently asked questions
What encryption algorithm does Filetico use?
AES-256-GCM for file content. The key is derived from your password with PBKDF2-SHA256 (210,000 iterations) directly on your device via the Web Crypto API; that key is never transmitted to our servers.
What happens if I forget my password?
We can't recover it for you. Since we never store your password or the derived key, there's no backdoor for us either — that's the proof the encryption is real.
Does end-to-end encryption apply to all my files?
Not by default — it's opt-in per folder. Folders you mark as encrypted use this model; everything else is stored securely but without this extra layer.
Are my file names encrypted too?
No. Currently only file content is end-to-end encrypted; the name, size and date are stored unencrypted so they can be shown in your file manager. See the full breakdown on our security page.
Store your files where only you hold the key
Create a free encrypted folder and see for yourself.
Create free account