Skip to content

Language

Appearance

Sign in Register

Security worthy of the name.

Genuine end-to-end encryption: your data is encrypted on your device, and the key stays with you. Zero-knowledge means the provider cannot see anything.

Try it yourself View plans

Whoever holds the key decides on access.

Many services speak of security. Often, all that is meant is the path between you and the provider. On the provider's side, the data then lies open.

Encrypted in transit only

Only the transport is protected. At the provider, the data is stored in readable form.

  • In transit across the networkencrypted
  • Stored at the providerreadable
  • Viewing by the providerpossible
  • The key is heldby the provider

End-to-end encrypted

Protection begins on your device and ends nowhere along the way.

  • In transit across the networkencrypted
  • Stored at the providerencrypted
  • Viewing by the providerruled out
  • The key is heldby you alone

Genuine encryption goes further. It protects your data where it originates. The difference sounds small and is decisive: with genuine end-to-end encryption, only you hold the key. Anything else is security by halves.

Encrypted before it leaves you.

Protection does not arise in transit, nor at the provider. It arises on your device, at the moment of entry. Whatever leaves your device is already unreadable. That way, your content remains yours alone.

Please do not enter a real password. This page does not send your input anywhere.

This is what reaches Fideno

p2QxR4m9VZt0bHkW7sLnC1eY8uJ3aFdG5oKi6rTy+UvEx/2NhS=

Method
AES-256-GCM
Key
only here
Length
0 bytes

Genuine AES-256-GCM encryption, directly in your browser. The key is created on this device and does not leave it. Even the same input produces a different result every time, because each encryption receives a new random value.

Your key. Yours alone.

The key decides everything. Whoever has it can read. With genuine encryption, it is created on your side and stays with you. It is not deposited, not copied, not handed over. You have access. No one else does.

Where is the key to your data held?

  • On your devicepresent

    It is created there when you enter your master password, and it is used only there.

  • At Fidenonot present

    We store only encrypted data that we cannot open.

  • With third partiesnot present

    There is no master key and no back door.

From entry to storage. Readable only by you.

Every entry passes through five stages. It is readable only on your device. Only the encrypted form is ever transmitted and stored.

Life cycle of an entry Five stages through the device sphere, transfer sphere and custody sphere: capture, encapsulation, handover, custody and dissolution. Only the unreadable form is stored, and once expired, no usable residue remains. DEVICE SPHERETRANSFER SPHERECUSTODY SPHERE INITIATEDENCLOSEDTRANSMITTEDSEALEDDISSOLVED Capture 1 Originates locally, is nottemporarily stored. Encapsulation 2 The envelope closes beforethe first transition. Handover 3 Relayed withoutknowledge of content. Custody 4 Only the unreadableform is stored. Dissolution 5 Once expired, nousable residue remains. encapsulatednot reversible

Six principles, one standard.

How to recognise genuine security, with us and with any other provider.

Encryption at the source

Protection begins on the user's device. Data becomes unreadable before it reaches anything or anyone.

Key sovereignty with the user

Only the holder of the key decides on access. It is created on the user's side and is not deposited anywhere.

Zero-knowledge

The provider cannot see anything. Content and keys remain hidden, even from the operator itself.

No third-party access

Without your key, everything remains locked. Neither the provider nor outsiders can gain access.

Verifiable standards

Trust is no substitute for scrutiny. Genuine security follows open, recognised methods that can be traced and understood.

Data sovereignty

Your data belongs to you. It is not analysed, not sold and not opened for anyone else's purposes.

What the provider never sees.

Zero-knowledge means that the provider cannot see anything. Not the content, not the keys, not even in an emergency. Security does not depend on a promise, but on any view of the content being technically ruled out.

Cipher architecture Several independent protective rings enclose the core. Six principles: entropy source, derivation depth, encapsulation layer, military standard, unreadability principle and decay window. SOURCE TRUST Entropy source Randomness is sourced, not computed. DEPTH BINDING Derivation depth The hardening follows no published curve. LAYER ISOLATION Encapsulation layer Each layer seals independently of the one above it. NORM ADEQUACY Military standard Protection level of state applications. STATE REFUSAL Unreadability principle Without user sovereignty, no usable state exists. EXPIRY BARRIER Decay window Transient states end before they become observable.

Security is not a promise. It is architecture.

View plans Report a vulnerability

Enterprise Security. No Compromise.

Register for our next free, no-obligation live webinar and see how FidenoVault protects your logins.

  • Zero-knowledge
  • European sovereignty
  • GDPR-compliant
Reserve your place