We had to change our old domain. guideora.net is our new and only official domain. Never trust any fake domain using the GUIDEORA name, or similar names pretending to be GUIDEORA.

GUIDEORA

cloud storage comparison

Zero-Knowledge vs Encrypted-at-Rest: The Phrase That Lies

Jordan HaleJordan Hale· Privacy Editor· Updated January 8, 2025· 12 min read

Some links on this page may earn GUIDEORA a commission. Disclosure

Quick take

Encrypted-at-rest means the vendor's disks have encryption. Zero-access / E2E means they should not be able to read file contents in the ordinary product. Proton Drive is the E2E example this site uses. Google Drive-class products are excellent at collaboration and a different trust model. Confirm live docs. Lost keys can mean lost files.

Marketing stole 'encrypted'

Every serious host encrypts disks. That stops a stolen hard drive in a datacenter. It does not stop a support tool or a warrant for data the host can decrypt. Ask who can mint a plaintext.

Zero-knowledge is a strong claim. It usually costs convenience: worse search, worse sharing previews, a recovery-key ritual.

From the record

If they can reset your files for you without a key you hold, they can read the files. That may be fine. It is not zero-access.

GUIDEORA rule for cloud encryption phrases

Pick the job

Family photo search and Docs comments want a host that can see enough to help. Tax PDFs and journals may want Proton-style E2E. Splitting clouds is allowed.

Encryption keys on a user's device versus keys at the host
At-rest is the disk. Zero-knowledge is who can mint a read.

At-rest

Vendor disks

E2E

Your keys

Preview

A tell

Collaborate

Often not E2E

  • Read the whitepaper, not the homepage adjective.
  • Filename encryption is a separate claim from content encryption.
  • A password on a share link is not E2E by itself.
  • UK iCloud ADP-style caveats exist — jurisdiction matters.

Proton Drive in this pairing

Proton Drive currently documents end-to-end encryption for files and filenames as they describe it, with a small free tier and paid Drive Plus. That is the zero-access example this site already reviews. It is not Google Docs. Confirm the live cryptographic story.

Checkout and the security page win. We will not re-audit Proton in this paragraph.

Pros

  • +You stop being fooled by 'encrypted' on a brochure
  • +E2E clouds exist for the tax PDF job
  • +Collaboration clouds remain the right tool for comments

Cons

  • −E2E is clumsier
  • −Lost recovery keys are brutal
  • −People still upload tax PDFs to the collab cloud

Name the reader

Ask who can mint plaintext. Proton Drive is the E2E example. GUIDEORA does not hold your keys.

Editor take

Who can mint plaintext?

At-rest is not zero-access. Proton Drive is the E2E example this pairing uses. Confirm live docs. Collaboration clouds are a different job.

See Proton Drive's current plan