NordLocker

Last updated
Developer(s) Nord Security [1]
Initial releaseNovember 13, 2019;4 years ago (November 13, 2019) [2]
Operating system
Platform
Type Encryption software
License Commercial proprietary software
Website nordlocker.com

NordLocker is a file encryption software integrated with end-to-end encrypted cloud storage. It is available on Windows and macOS. NordLocker is developed by Nord Security, the Lithuania-based [3] company behind the NordVPN virtual private network.

Contents

NordLocker uses a freemium business model, where users are offered a free account with unlimited local file encryption and a set amount of cloud storage with sync and backup features. More cloud storage is available via a paid subscription.

History

In May 2019, NordVPN announced the upcoming launch of NordLocker, "an app with a zero-knowledge encryption process". [4] Although the initial estimated time of arrival was summer 2019, the actual launch took place in November. The app was launched as a local file encryption tool with secure sharing. Users were able to encrypt up to 5 GB of data for free or pay for unlimited encryption. [5]

In March 2020, NordLocker announced newly implemented cloud sharing integrations with Dropbox and Google Drive. [6]

In August 2020, NordLocker launched a cloud storage add-on, a feature allowing users to back up their data and synchronize it across multiple devices. [7]

Features

NordLocker is an encryption software with cloud integration. The software uses so called "lockers" - encrypted folders to encrypt and store user files. Users can create an unlimited number of lockers, drop files in to encrypt them, and transfer lockers separately. [8]

The app uses client-side encryption to secure files on the user's device first. [9] It's a zero-knowledge encryption system, where the developers have no data about users' files. [10] After the encryption process, the user can decide whether to store data locally or sync it via NordLocker’s cloud. [11] NordLocker syncs files via a private cloud, so they can be accessed from any computer with the NordLocker app installed.

The program uses AES-256 and 4096-bit RSA encryption algorithms [12] as well as Argon2 and ECC (with XChaCha20, EdDSA, and Poly1305). [13] NordLocker uses Libsodium to generate a random 256-bit key and encrypt lockers. To encrypt that key, the app then uses XChaCha20-Poly1305 and the user’s master password. [14]

The local encryption is free as of December 2020 — the service monetizes cloud storage space beyond the 3 GB provided with the free plan.

Hacking contest

In April 2020, NordLocker launched the "NordLocker Bounty campaign", a hacking competition with the top prize of $10,000. [15] To win, a person had to download an encrypted "locker" from the company's site, hack into it, and find the hidden message. Based on the NordLocker’s campaign page, there were over 600 attempts to break the locker but no one has claimed the bounty as of December 2020. [16]

Reception

A June 2020 PCMagazine review noted that NordLocker was easy to use but lacked features like secure file deletion and two-factor authentication. [17] In August 2020, ITPro called NordLocker’s cloud add-on a “critical feature for modern business, especially with the coronavirus outbreak forcing many companies’ workforces to remain remote.” [18] Restore Privacy praised NordLocker for strong end-to-end encryption and the "new, lower price" but mentioned the fact that NordLocker is not open-source. [19]

Boxcryptor, another encryption service, has compared NordLocker’s security to their own but noted that NordLocker does not have a mobile application. [20]

See also

Related Research Articles

A file-hosting service, also known as cloud-storage service, online file-storage provider, or cyberlocker, is an internet hosting service specifically designed to host user files. These services allow users to upload files that can be accessed over the internet after providing a username and password or other authentication. Typically, file hosting services allow HTTP access, and in some cases, FTP access. Other related services include content-displaying hosting services, virtual storage, and remote backup solutions.

This is a comparison of online backup services.

This is a comparison of notable file hosting services that are currently active. File hosting services are a particular kind of online file storage; however, various products that are designed for online file storage may not have features or characteristics that others designed for sharing files have.

DNSCrypt is a network protocol that authenticates and encrypts Domain Name System (DNS) traffic between the user's computer and recursive name servers. DNSCrypt wraps unmodified DNS traffic between a client and a DNS resolver in a cryptographic construction, preventing eavesdropping and forgery by a man-in-the-middle.

<span class="mw-page-title-main">Mega (service)</span> Cloud storage and file hosting service

Mega is a file hosting service offered by Mega Cloud Services Limited, a company based in Auckland, New Zealand and owned by Hong Kong based Cloud Tech Services Limited. The service is offered through web-based apps. MEGA mobile apps are also available for Android and iOS.

Tresorit is a cloud storage platform that offers functions for administration, storage, synchronization, and transfer of data using end-to-end encryption.

Wickr is an American software company based in New York City. It is known for its instant messaging application of the same name. The Wickr instant messaging apps allow users to exchange end-to-end encrypted and content-expiring messages, and are designed for iOS, Android, Mac, Windows, and Linux operating systems. Wickr was acquired by Amazon Web Services (AWS) in mid-2021. The free version of the app was discontinued in December 2023.

<span class="mw-page-title-main">Proton Mail</span> End-to-end encrypted email service

Proton Mail is a Swiss end-to-end encrypted email service founded in 2013 headquartered in Plan-les-Ouates, Switzerland. It uses client-side encryption to protect email content and user data before they are sent to Proton Mail servers, unlike other common email providers such as Gmail and Outlook.com. The service can be accessed through a webmail client, the Tor network, Windows, macOS and Linux (beta) desktop apps and iOS and Android apps.

Peerio was a cross-platform end-to-end encrypted application that provided secure messaging, file sharing, and cloud file storage. Peerio was available as an application for iOS, Android, macOS, Windows, and Linux. Peerio (Legacy) was originally released on 14 January 2015, and was replaced by Peerio 2 on 15 June 2017. The app is discontinued.

<span class="mw-page-title-main">Tuta (email)</span> Free and open-source end-to-end encrypted email software and host

Tuta, formerly Tutanota, is an end-to-end encrypted email app and a freemium secure email service. The service is advertisement-free; it relies on donations and premium subscriptions. As of June 2023, Tutanota's owners claimed to have over 10 million users of the product. The company announced a transition to 100% renewable electricity in March 2019. This decision coincided with employee participation in Fridays for Future protests.

NordVPN is a Lithuanian VPN service with applications for Microsoft Windows, macOS, Linux, Android, iOS, Android TV, and tvOS. Manual setup is available for wireless routers, NAS devices, and other platforms.

Outline VPN is a free and open-source tool that deploys Shadowsocks servers on multiple cloud service providers. The software suite also includes client software for multiple platforms. Outline was developed by Jigsaw, a technology incubator created by Google.[3]

Proton AG is a Swiss technology company offering privacy-focused online services. It was founded in 2014 by a group of scientists who met at CERN and created Proton Mail.

NordPass is a proprietary password manager launched in 2019. It allows its users to organize their passwords and secure notes by keeping them in a single encrypted vault. NordPass, which operates on a freemium business model, was developed by the VPN service NordVPN.

A virtual private network (VPN) service provides a proxy server to help users bypass Internet censorship such as geo-blocking and users who want to protect their communications against data profiling or MitM attacks on hostile networks.

ChaCha20-Poly1305 is an authenticated encryption with associated data (AEAD) algorithm, that combines the ChaCha20 stream cipher with the Poly1305 message authentication code. It has fast software performance, and without hardware acceleration, is usually faster than AES-GCM.

NordLayer, formerly known as NordVPN Teams, is a network access security service with applications for Microsoft Windows, macOS, Linux, Android and iOS. The software is marketed as a privacy and security tool running on zero trust architecture providing protection on hybrid and multi-cloud cloud environments.

Proton Drive is an end-to-end encrypted, cloud-based file storage and synchronization service developed by Proton AG. Proton Drive enables storing files in the cloud, synchronizing files across devices, and sharing files securely. It is accessible through a web application, desktop applications for Windows and macOS, and mobile applications for Android and iOS.

<span class="mw-page-title-main">Amnezia VPN</span> Open-source self-hosted VPN software

Amnezia VPN is a free and open-source application that allows users to create a personal VPN using their own server. It uses the OpenVPN, WireGuard, Shadowsocks, IKEv2 and Cloak protocols.

<span class="mw-page-title-main">Cryptomator</span> Free and open-source file encryption software

Cryptomator is an open source encryption software that provides encryption for cloud drives. It provides transparent, client-side encryption for personal cloud storage. Cryptomator encrypts each file separately and then allows the user to sync files with a cloud or local storage of choice. It is available for all major operating system including Android, iOS, Windows, Mac, Linux.

References

  1. "Products". Nord Security. Retrieved December 16, 2020.
  2. "NordLocker - Creators of NordVPN Announce Launch of New Cybersecurity Product". Irish Tech News. November 14, 2019. Retrieved December 16, 2020.
  3. Gewirtz, David (2022-02-04). "Meet Nord Security: The company behind NordVPN wants to be your one-stop privacy suite". ZDNET. Retrieved 2024-09-14.
  4. Kan, Michael (May 31, 2019). "NordVPN Expands Into File Encryption With NordLocker". PCMag . Retrieved December 16, 2020.
  5. "NordLocker - Creators of NordVPN Announce Launch of New Cybersecurity Product". Irish Tech News. November 14, 2019. Retrieved December 16, 2020.
  6. Armstrong, Elisa (March 19, 2020). "New in NordLocker: recent folders, cloud and more". NordLocker.com. Retrieved December 16, 2020.
  7. Guta, Michael (August 25, 2020). "NordLocker Introduces Encrypted Cloud Storage Add-on". Small Business Trends. Retrieved December 16, 2020.
  8. Rubenking, Neil J. (May 31, 2019). "NordLocker". PCMag UK. Retrieved December 16, 2020.
  9. Cupler, Justin (August 21, 2020). "NordLocker encryption heads to the cloud". ITPro. Retrieved December 16, 2020.
  10. Guta, Michael (August 25, 2020). "NordLocker Introduces Encrypted Cloud Storage Add-on". Small Business Trends. Retrieved December 17, 2020.
  11. "NordVPN's File Encryption Tool Launches a Cloud Storage Add-on". cerebral-overload.com. August 20, 2020. Retrieved December 16, 2020.
  12. Kan, Michael (May 31, 2019). "NordVPN Expands Into File Encryption With NordLocker". PCMag . Retrieved December 16, 2020.
  13. Rubenking, Neil J. (May 31, 2019). "NordLocker". PCMag UK. Retrieved June 5, 2020.
  14. Mills, Matt (December 25, 2019). "NordLocker". itigic.com. Retrieved December 16, 2020.
  15. "NordLocker Invites Ethical Hackers to Crack Encrypted Locker Worth $10,000". Irish Tech News. April 2, 2020. Retrieved December 17, 2020.
  16. "$10,000 NordLocker Bounty". NordLocker. Retrieved December 17, 2020.
  17. Rubenking, Neil J. (May 31, 2019). "NordLocker". PCMag UK. Retrieved December 16, 2020.
  18. Mills, Matt (December 25, 2019). "NordLocker". itigic.com. Retrieved December 16, 2020.
  19. Long, Heinrich (September 16, 2020). "NordLocker Review". Restore Privacy. Retrieved December 17, 2020.
  20. "NordLocker: The New Cloud Encryption Solution by NordVPN". Boxcryptor. November 1, 2019. Retrieved December 17, 2020.