PsiDriveA random AES key protects the file and remains in the complete share link fragment.
Add another check before the download begins.
Every PsiDrive transfer uses browser-side encryption. When a link needs an extra access check, add an 8–128 character transfer password and deliver it separately.
Optional passwordSalted verifierSeparate encryption keyAutomatic expiry
Two controls with two different jobs.
The random transfer key decrypts file content. The optional password authorizes a recipient before encrypted parts can be downloaded. Keeping these concepts separate makes the protection easier to understand.
The recipient supplies the password before the API issues a short-lived download authorization.
The server stores a salted password verifier rather than the password itself.
Use the password safely.
Enter an 8–128 character password before starting the upload.
Send the full transfer link and password through different trusted channels when practical.
The recipient enters the exact password before decryption and saving begins.
Password protection FAQ
Does PsiDrive store the password?
It stores a salted password verifier, not the plaintext transfer password.
Is the password also the encryption key?
No. The transfer uses a separate random AES key. The password adds an authorization check.
What if the password is forgotten?
PsiDrive cannot reveal it. The sender should create a new transfer if needed.