Think about what you've copied to your clipboard in the last week. Passwords. Credit card numbers. Private messages. API keys. Your clipboard is one of the most sensitive data streams on your device, and if you're syncing it across devices, standard HTTPS is not enough.
What True E2E Encryption Actually Means
End-to-end encryption (E2E) means data is encrypted on your device before it's sent. The servers in between only see encrypted blobs they cannot read. This is a "Zero-Trust" model.
Unlike tools that use "Encryption at Rest" where the provider holds the keys, Quilon uses client-side key generation. We literally cannot read your data, even if we wanted to.
The Quilon Security Stack: AES-256 & PBKDF2
Quilon uses industry-standard AES-256-CBC encryption—the same level of security used by financial institutions. But encryption is only as good as the keys behind it.
Key Derivation (PBKDF2)
We use PBKDF2-HMAC-SHA256 with 310,000 iterations to derive encryption keys. This makes brute-force attacks computationally expensive and provides a massive safety margin against modern hardware.
Data Integrity (HMAC)
To prevent tampering, every encrypted clip is signed with an HMAC-SHA256 signature. This ensures that the data you paste is exactly what you copied, and hasn't been modified in transit.
Why "Trust Us" Isn't Good Enough
Many services (like Pushbullet or standard cloud notes) say "we don't read your data." But if they can read your data, you're trusting their employees, their server security, and their legal department. Quilon removes the need for trust by using math to enforce privacy.
- No employee access: Not even our engineers can see your clips.
- Breach protection: Even if our database was stolen, your data remains encrypted and unreadable.
- Zero Logs: We don't store your clipboard history. We are a relay, not a storage vault.
The Tradeoffs
Zero-knowledge security comes with one major tradeoff: No account recovery. If you lose your devices and your pairing codes, we cannot reset your keys because we never had them. This is the price of true privacy.
Because when it comes to security, "trust us" should never be the answer. Math is the only answer.