The Icedrive encryption process is handled entirely client-side - meaning all data is encrypted on your device before being sent to our servers for storage.

The first stage is the encryption of the filename. This is done using your key to produce an encrypted hex string to store in our database. The second stage is the file is split into small, manageable chunks.

Each chunk is encrypted through 16 rounds using your 256-bit key which is stored client-side only. The small chunks are then uploaded piece by piece to our secure servers over HTTPS which are then added piece by piece to the encrypted data. The final chunk gets padded with dummy data in order to fill the twofish block size.

The end result is a highly encrypted file and filenames, with no leak-able data, accessible only by you.