How Drime protects your data

Drime protects your files in several ways. The strongest is the Vault, an end-to-end encrypted space that even Drime cannot read.

#The Vault: end-to-end encryption

Files you put in your Vault are encrypted in your browser before they are uploaded. Each file has its own random key, protected by keys derived from your Vault Pass. Your Vault Pass and these keys are never sent to Drime: the app says We don't know or store your Vault Pass anywhere on our servers.

Inside the Vault, Drime cannot read:

• the contents of your files;

• the names of your files and folders;

• the real file type, the dates, the photo metadata and your tags;

• the thumbnails, which are created and encrypted in your browser.

Drime can still see the folder structure, the encrypted sizes, the dates on its servers and who uploaded each file.

Third-party apps connected to your account can never access the Vault.

Because Drime never has your Vault Pass, it cannot recover it for you. See What is Vault? for how it works in detail, and I forgot my Vault Pass.

#Your other files

Files outside the Vault are not end-to-end encrypted. They are encrypted in transit and at rest, and hosted in Europe on ISO 27001 certified servers.

For a file that only you can read, put it in your Vault.

#Your account

Your files outside the Vault are only as safe as your account. To protect it:

• turn on two-factor authentication, or sign in with a passkey;

• read the email Drime sends when your account is signed in from a browser and system it has not seen before: see I got a new sign-in alert;

• from time to time, check your password, your sign-ins and your two-factor authentication: see Do a security checkup of your account.

If you think someone else is using your account, see I think someone else is using my account.

#Next steps

• What is Vault?

• Do a security checkup of your account

• Share files safely