Cryptee Explained

Cryptee
Commercial:Yes
Type:
Registration:Required
Language:English
Content License:Open Source
Owner:John Ozbay
Current Status:Active

Cryptee is a privacy focused client-side encrypted and cross-platform productivity suite and data storage service. Users can write personal documents, notes, journals, store images, videos, and various kinds of other files. The company's commercial strategy is focused on offering to its users an open source and transparent Photo Storage, Document Editor and Cloud Storage services without trackers or advertisements as it seeks to compete with Google Docs, Google Photos and similar services through its offerings. Cryptee, based out of Tallinn, Estonia, Europe, utilizes zero-access storage to safe-keep all users' sensitive digital belongings.

History

Cryptee was founded in 2017, by John Ozbay, a cybersecurity researcher, commenter, and activist, to exclusively focus on providing a secure document editing service similar to Google Docs and Photos for everyone, with a particular focus on victims and survivors of domestic abuse, journalists and reporters.

Software

The source code of Cryptee is open source and publicly available to allow anyone to audit the service with ease, and help identify errors or potential vulnerabilities in a public and transparent manner.

Cryptee has a few key features that differentiate it from other services in the industry, such as its Ghost Folders and Ghost Albums features, built specifically with victims and survivors of domestic abuse, journalists and reporters in mind, which allows users to hide (ghost) folders for plausible deniability also as known as deniable encryption in the field of cryptography and steganography, and ensure privacy even under coercion.

Features

Cryptee Docs' features include:

Cryptee Photos' features include:

Advocacy

Lockdown mode

In July 2022, to fortify iPhones against the Pegasus Spyware, Apple announced a new, upcoming Lockdown Mode feature in iOS 16, welcomed by many experts.

In the following weeks after Apple's announcement, in August 2022, the Founder and CEO of Cryptee, and privacy activist John Ozbay published their research highlighting an important shortcoming of Apple's Lockdown Mode, along with a proof of concept website to demonstrate that enabling Lockdown Mode makes it possible for all websites and online ads to be able to detect if users have Lockdown Mode enabled or not. Commenting further in a call, Ozbay said: “Let's say you're in China, and you're using Lockdown Mode. Now, any website that you visit could effectively detect you are using Lockdown Mode, they have your IP address as well. So they will be able to identify that the user with this IP address is using Lockdown Mode”.It is also reported that Ozbay reached out to an Apple employee on Twitter and had a conversation with him about the issues he found. The employee, according to screenshots of their chat, told him that “web fonts are disabled intentionally to remove font parsing from the available web attack surface,” and that watering hole attacks are part of our threat model, so I'm not sure it would make sense to have web font exceptions per site”.The article further concluded that there’s nothing Apple can do right now to mitigate this issue without fundamentally changing how Lockdown Mode works and that Apple did not respond to a request for comment.

Apple, the EU Digital Markets Act and Web Apps

In February 2024, Apple announced plans to kill progressive web apps on iOS devices in the EU, claiming it was to comply with the Digital Markets Act (DMA). The announcement was criticized as anti-competitive by many in the tech industry, including by Tim Sweeney, the CEO of Epic Games.

In response, Cryptee started working together with Open Web Advocacy (OWA), an international not-for-profit digital rights group to advocate for the future of the open web, promote web browser choice on mobile operating systems through challenging Apple's anti-competitive third party browser engine ban, and to champion the use and equality of progressive web apps over native apps, by reaching out to the European Union's Digital Markets Act (DMA) team.

To better understand the consequences of Apple's decision to kill web apps, the EU announced that they "seek to investigate Apple over cutting off web apps", and that they sent "requests for information to Apple and to app developers, who can provide useful information for our assessment". Apart from sending a response to the EU, Cryptee, along with the OWA, launched an open letter to Tim Cook, which in 48 hours, got thousands of signatories including : European Parliament Members (MEPs) (Karen Melchior & Patrick Breyer); and thousands of other developers and organizations from over 100 countries. Consequently, 24 hours later, Apple backed off, and reversed course on its plan to cut off progressive web apps in the EU.

Following the events, eventually on March 18th, 2024, Founder and CEO of Cryptee John Ozbay represented the Open Web Advocacy (OWA) group in European Union's Digital Markets Act (DMA) hearing for Apple.At the hearing, OWA confronted Apple, accused Apple of "maliciously intending to undermine user choice", and stated that there was no defense for Apple's behavior.In response, -according to the tech news outlet Ars Technica-, Apple's spokesperson "seemed to dodge Ozbay's question".

Within a week of the hearing, the European Union announced a DMA non-compliance investigation against Apple, and United States' Department of Justice filed an antitrust lawsuit against Apple.

A few months later, on June 27, 2024, Cryptee, in cooperation with EDRi — an international advocacy group, along with Article 19 — a British international human rights organization, Privacy International, F-Droid, Free Software Foundation Europe, Guardian Project (software) and others have submitted a comprehensive analysis to the European Commission about how Apple’s plans to comply with the Digital Markets Act (DMA) are insufficient.

Reviews

In a 2018 article, Wall Street Journal's MarketWatch reviewed Cryptee, articulating the fact that Cryptee offers zero-access storage for photos, files, documents and notes, and pointed out that: "Being based in Estonia puts Cryptee outside the “14 eyes jurisdiction,” an international surveillance alliance of European Union and North American countries, making it less likely it will be targeted with demands for data". In addition, the review highlighted Cryptee's Ghost Folders feature which ensures privacy even under coercion. In a 2019 article, Reclaim The Net named Cryptee as one of the "5 great privacy-focused Evernote alternatives to keep your notes safe", underlining that: "When it comes to security, this app is state of the art." and that "When making this app, the developers thought about every aspect of security and have taken every precaution to make it as secure as possible.". The review further underscored Cryptee's open-source nature, its strong encryption, and easy migration features.

In a 2021 article, The Verge reviewed Cryptee, pointing out that Cryptee, -based out of Europe- is one of the main photo storage service alternatives to Google Photos, and that it's their recommendation for users who are "concerned about privacy and like the idea of encryption" as Cryptee "offers to keep all your photos encrypted using AES-256". In a 2024 article, Beebom, enlisted Cryptee as one of the "7 best iCloud Photos Alternatives for iPhone and iPad", making complements to Cryptee's simplicity, its use of encryption to safeguard users' photos against hacking by not storing any unencrypted data, and bringing further attention to Cryptee's additional features such as such as Ghost Albums, slideshows, easy-to-use drag and drop uploads, tagging and users' ability to store original-quality photos on Cryptee, concluding that Cryptee is "a safe bet if you are on the lookout for a privacy-centric iCloud Photos alternative".

External links