18
Anonymous Zero-Knowledge Encrypted Cloud Storage
(thelemmy.club)
Source code and details: https://github.com/umutcamliyurt/Lethean
Lethean is a zero-knowledge encrypted storage app with no accounts, no email. Your passphrase is the only credential and never leaves the browser. Upload photos and videos, browse them in a gallery, and play them fully decrypted in memory, the server only ever sees ciphertext.
Features
- No user account required
- AES-256-GCM for client-side encryption
- Ciphertext padding to hide file size metadata
- Argon2id for key derivation
- Duress code for wiping the vault under coercion
Access tokens
Browsing a vault requires only its vaultId. Uploading additionally
requires an operator-issued access token (10 GB quota by default),
provisioned server-side.
A freshly issued token binds permanently to the first vault that uploads with it; a bound token cannot be reassigned.
People really need to learn "the cloud" just means "a hard drive someone else owns"...
It's always weird when people start pushing cloud based apps for privacy/security. Because at the end of the day, you're handing all your data to some dude you don't know, along with almost certainly identifiable information.
Sometimes it’s better not to keep sensitive data on your own device in the first place, for example when crossing country borders. With zero-knowledge encryption, nobody except the person who has the encryption key can view the contents of files, so where the data is stored is less important. Lethean’s duress password feature also lets a user nuke their vault if they are under coercion.