What Is Zero-Knowledge Encryption? A Simple Guide
Zero-knowledge encryption means the service that stores your data cannot read it. Your data is encrypted with a key made from something only you know, and the company never sees that key.
It is a marketing term, not a standard. So the useful question is not "does it say zero-knowledge" but "who can unlock my data".
Try Cryptile free: join the beta on TestFlight
What do I need to know?
- It is about who holds the key. If only you hold it, the company cannot read your data.
- There is no password reset. If the company could reset it, the company could get in.
- It is not the same as end-to-end. They often go together but answer different questions.
How is it different from end-to-end encryption?
End-to-end encryption is about data moving between devices. Apple puts it this way: "End-to-end encrypted data can be decrypted only on your trusted devices where you're signed in to your Apple Account."
Zero-knowledge is about the provider. It says the company storing your data learns nothing about it. In practice, both point at the same test: the key never leaves your devices.
Is iCloud zero-knowledge?
Not by default. Under standard data protection, Apple says your keys "are secured in Apple data centers, so Apple can decrypt your data on your behalf whenever you need it." That covers iCloud Photos and iCloud Backup.
Some categories are different. Apple says 15 data categories, including Health and passwords in iCloud Keychain, are end-to-end encrypted by default. With Advanced Data Protection, available from iOS 16.2, the list grows to include Photos and Backup. The source is Apple's iCloud data security overview.
Why can't a zero-knowledge service reset my password?
Because it does not have your key. Apple says that with Advanced Data Protection on, it "doesn't have the encryption keys needed to help you recover your end-to-end encrypted data." That is why it asks you to set up a recovery contact or recovery key first. Apple's Advanced Data Protection page explains both.
Any app that truly holds no key has the same rule. It will ask you to keep a recovery code somewhere safe.
How can I tell if an app is really zero-knowledge?
Ask these five questions.
- Does it need an account? An account is not proof of a problem, but ask what it can unlock.
- What happens if I forget my password? An email reset means the company can get in.
- Where is the key made? "On your device, from your password or pattern" is the answer you want.
- Is the design published? A public description or source code lets others check the claim.
- What does it say it cannot protect? An honest app lists its limits.
Does zero-knowledge mean nobody can get in?
No. It removes one risk: the company reading your data, or handing it over. Your data is still only as safe as your password and your unlocked phone. A short password can be guessed.
What this doesn't protect against
Zero-knowledge encryption protects stored data from the company storing it. It does not protect an unlocked phone in someone else's hands, a screenshot, or malware on your device. If you lose your password and your recovery code, your data is gone for good.
Do it with Cryptile
Cryptile has no account and no server, and the developer never holds your keys. Keys are derived on your iPhone from a pattern you draw, and every file is encrypted with AES-256-GCM. The core is published for audit with a threat model, and the security page lists the limits.
If you forget your pattern, the 9-word recovery phrase restores your vault from its encrypted iCloud backup. There is no reset. Use 8 or more cells in your pattern.
Cryptile is free for up to 2 vaults, 100 photos and 10 videos. Plus removes the limits for $19.99 a year (7-day free trial) or $39.99 once.