What is end-to-end encryption?
End to end encryption is a strong claim with a precise meaning. If the service holds the keys, or can reset your password and read your data afterwards, it is encrypted in transit and at rest, not end to end.
What matters here
- Keys live with the users, not the server
- The server stores ciphertext it cannot read
- Lost keys usually mean lost data
- Metadata may still be visible
- Search and recovery get harder by design
The distinction that matters
Encryption at rest protects a stolen disk. Encryption in transit protects the network. End to end protects the content from the service itself. Products often mention the first two while implying the third.
The cost
Server side search, password reset and account recovery all conflict with true end to end encryption. A product that offers all three is either not end to end or is encrypting only part of your data.
How to check a claim
Look for a description of where keys are generated and stored, and whether the provider can decrypt on request. A security page that never mentions key ownership is not answering the question.
Frequently asked questions
Keep reading
- What is a backlog?A backlog is an ordered list of work that has been accepted but not started, kept so good ideas are not lost.
- Prysm Note for debt payoffA payoff plan that shows progress: every debt as an item, every payment recorded, and a monthly check on what is left.
- Prysm Note for design handoffDesign handoff fails on unstated assumptions. A short spec, a decision note and a checklist of states prevent the fifth round of revisions.
Turn talk into a plan
Capture a thought in plain language and let Prysm Note shape it into tasks and a timeline.
Disclaimer
This page is general information, not professional, legal, financial or medical advice. It describes common ways of working and how Prysm Note approaches them. Software changes over time, so details may differ from what you see in the product. Any product, company or brand names that appear are the property of their respective owners and are used only for identification. We do not claim any endorsement or affiliation. Where we compare approaches, we aim to describe each one honestly, including where a different approach may suit you better. Try the tools that matter to you and judge for yourself.