What the design protects against, and what it does not.
Threat model
What we protect against, and what we don’t.
Every product has limits. We’d rather you know ours than discover them.
We protect against
Server breach
An attacker who steals our database gets ciphertext. The keys to decrypt it never touch our servers.
Insider access at Beebeeb
No engineer, founder, or admin at Beebeeb can read your files. We don’t have the keys either.
Subpoena / legal compulsion
When legally compelled, we hand over what we have: ciphertext + metadata (size, timestamps, owner). Nothing decryptable.
Network observers
TLS 1.3 protects the connection; the payload is already encrypted client-side anyway.
Lost or stolen device
Web: your master key is stored wrapped by your password and cleared after inactivity. iOS: it sits in hardware-backed secure storage, tied to the device. Desktop and CLI: it relies on your computer’s login, so keep your disk encrypted and your screen locked.
Our hosting provider
Even if our hosting provider were fully compromised, they would see only ciphertext, the same as us.
We cannot protect against
Compromised device
If malware on your device steals your password and reads your files while they are decrypted in memory, that is outside our model. We protect you against the cloud, not against your own machine.
Lost password and lost recovery phrase
There is no backdoor. Both lost = data permanently inaccessible. This is the price of the guarantee.
Coerced password disclosure
If someone with a court order or a wrench compels you to type your password, we can’t help. The encryption is end-to-end; you are one of the ends.
Weak passwords
Argon2id makes every guess against a stolen password file expensive, but a six-character password is still a six-character password. Use a passphrase.
Sharing decisions
If you share a file with someone, they can read it and re-share its decrypted contents however they want. Nothing in cryptography fixes that.
Side-channel attacks on your hardware
Speculative execution exploits, evil-maid attacks, hardware keyloggers — we cannot defend against the device you are using.
Encryption you can verify.
14-day free trial. No card or iDEAL needed to start. Zero-knowledge from the first byte. Read the code, then decide.