Our Philosophy: Rejecting the Surveillance Cloud
For the past two decades, technology conglomerates have conditioned businesses and individuals to accept a false compromise: convenience in exchange for surveillance. When you store files on mainstream cloud platforms, they are encrypted "at rest," but the provider holds the master decryption keys on centralized servers.
This architectural design creates systemic vulnerabilities across personal and commercial data:
- Automated algorithms parse document metadata and media contents for indexing, labeling, and profiling.
- System administrators, backend engineers, and automated routines possess administrative pathways to view raw files.
- Broad, non-specific regulatory subpoenas and third-party requests can compel providers to surrender unencrypted customer records without user awareness.
Cryptographic Blueprint: How We Enforce Absolute Privacy
Encbyt pairs proven, industry-standard cryptographic algorithms with modern browser technology to ensure your data is locked before it ever enters our network.
1. Client-Side Authenticated Encryption (AES-256-GCM)
Every file and directory is divided into secure cryptographic segments and sealed using Advanced Encryption Standard (AES) in Galois/Counter Mode (GCM) with 256-bit keys. GCM provides both confidentiality and cryptographic integrity verification, ensuring that any tampering with ciphertext blocks is identified and rejected immediately before local decryption.
2. Local Key Derivation (PBKDF2 with SHA-256)
Your master encryption key is never derived on our servers. Using the native Web Crypto API inside your browser, your passphrase undergoes over 100,000 iterative rounds of PBKDF2 (Password-Based Key Derivation Function 2) combined with unique cryptographic salt. This computational hardness protects your vault against offline dictionary attacks and high-speed GPU brute-force attempts.
3. Sovereign 24-Word Recovery Protocol
Traditional zero-knowledge systems had a critical failure point: lose your password, and your data is gone forever; ask the provider for a reset, and they must maintain a master backdoor. Encbyt eliminates this trade-off through a deterministic 24-word cryptographic recovery phrase. Generated entirely on your device during account setup, this phrase allows you to reconstruct your vault keys and reset your master password independently without giving our platform administrative backdoors.
If you remember your master password, you can view or regenerate a fresh 24-word recovery phrase at any time directly inside your Account Settings console.
4. Complete Metadata Obfuscation
Metadata reveals patterns. At Encbyt, folder structures, file titles, extensions, and segment indices are scrambled into opaque ciphertext strings client-side. To our indexing servers, your vault appears as meaningless mathematical entropy.
5. Resilient, Resumable Transfer Fabric
Transferring large encrypted files through web browsers historically risked corruption if the connection dropped. Encbyt uses localized state preservation, enabling users to pause, disconnect, and seamlessly resume transfers from the exact byte where the connection was interrupted.
6. Browser-Optimized 5 GB Single-File Architecture
To ensure local device stability and prevent browser memory crashes during heavy cryptographic processing, the web console enforces a maximum 5 GB per-file ceiling. Users can store as many 5 GB files as their overall vault quota permits without system degradation.
Guiding Principles
- Zero Plaintext Telemetry: We do not run third-party advertising trackers, cross-site profiling beacons, or behavioral monitoring scripts. We log only essential, aggregate operational counters (such as account byte quotas) strictly required to maintain system stability.
- Open Client-Side Verifiability: True security requires verification, not blind faith. Because all encryption and decryption operations run locally within your browser using native Web Crypto APIs, any security auditor or technical user can open browser developer inspection tools (DevTools) and audit network traffic. Plaintext data never touches our network interfaces.
- Zero Administrative Backdoors: We do not maintain master keys, recovery escrow vaults, or internal administrative override consoles. If you hold your credentials, your data is accessible. If both your master password and your 24-word phrase are lost, the vault remains permanently unreadable to everyone—including us.
- Fair & Responsible Data Preservation: We respect user archives. When an account trial or subscription concludes, data is never wiped impulsively. Encrypted files are transferred into an isolated, dormant preservation tier for ninety (90) days, giving users ample runway to reactivate their storage without risking permanent data loss.
The Team & Corporate Identity
Encbyt is developed, maintained, and operated by an independent team of cybersecurity engineers, systems architects, and open-source advocates. We prioritize infrastructure independence, technical transparency, and sovereign user rights above enterprise data-mining business models.
Entity: Encbyt Technologies
Engineering, Operations & Headquarters: Dist- Pali, Rajasthan, India
Corporate Communications: [email protected]
Security Inquiries: [email protected]