> For the complete documentation index, see [llms.txt](https://tchspprt.gitbook.io/tech-support/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://tchspprt.gitbook.io/tech-support/digital-life-freedom/encryption/cloud-file-storage.md).

# Cloud file storage

First of all, you have to understand that ***we can never trust companies with our data***.

This is a fundamental concept to live by in [Personal OPSEC](https://duckduckgo.com/?q=personal+opsec). 

This means that we can ONLY EVER TRUST solutions which provide "**zero-knowledge encryption**".

*Zero-knowledge* means that your data is encrypted with *your own encryption key* **before** it leaves your machine. That way, ~~if~~ ***WHEN*** the host company is forced to give up your data, *they actually cannot*.

There are many solutions available, ***be sure to check for zero-knowledge encryption*** — although, actually, there are also applications available which provide local encryption for your files before you upload them to *any* service. Rclone is one of them, as is S3 Sync. 

You should also know that "AI" is already able to crack 56-bit encryption. So we are not far off from everyone needing quantum-resistant encryption algorithms.

## Proton Drive

Proton Drive is controversial already because a) the company seems to be drifting from their ideology, and b) their support for Linux is shocking. This is an important aspect because Linux, F/OSS users & developers, tend to be the most committed and most vocal users of security, privacy and encryption.

Anyway.

Using Proton Drive on Linux is possible, but only via third-party tools. One such tool is ***rclone***.

<mark style="color:red;">Proton's official stance is to ban rclone</mark>, which raises ***further*** questions & concerns...

Anyway, where there's a will, there's a way:

### Sync on Linux with *rclone*

Proton Drive is zero-knowledge encrypted, but there's no Linux sync app.

1. follow setup instructions on <https://rclone.org/protondrive>&#x20;
2. in the command-line setup process, paste your password with <mark style="color:orange;">`Ctrl`</mark><mark style="color:orange;">+</mark><mark style="color:orange;">`SHIFT`</mark><mark style="color:orange;">+</mark><mark style="color:orange;">`V`</mark>. (The password input is hidden, so don't mis-press anything. You have to enter it twice.)
3. current 2FA must be included with `--protondrive-2fa=XXXXXX`
4. proton company is being an ass and is blocking rclone, so you must set `--protondrive-app-version "macos-drive@1.0.0-alpha.1"` when connecting
5. [proton's *own* Sentinel service must be disabled](https://account.proton.me/mail/security), at least for initial connection
6. proton's own VPN seems to be blocked (ymmv)
7. continue following the setup instructions on rclone's website

### Sync on Windows

Proton has their own sync app for Windows (although ironically it identifies itself as the MacOS client).

It uses Windows's own cloud file system API, so it shows cloud sync status in File Explorer automatically, and it deletes local copies of files that you haven't used for a while. You can also right click on a file or folder and choose "Always keep on this device" or "Free up space".

<figure><img src="https://1894516225-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FrM42SLcssAVNZFBbEvpa%2Fuploads%2Fz7jfipE7WHBp59TDjlL5%2Fimage.png?alt=media&amp;token=0df8f13e-29cb-4689-9b32-a9193afe5053" alt=""><figcaption></figcaption></figure>