File security, in plain terms
Deep dives on encryption, secure erasure, and keeping your files private — from the team behind FileX.
How to build a data retention schedule (without inventing the periods yourself)
A retention schedule only works if the periods are correct for your data. How to structure one, and what a tool can and can't decide for you.
What is data classification, and why should you do it before you share a file?
Knowing whether a file is Public or Restricted changes how you should handle it. Here's what data classification actually checks for, in plain terms.
What makes a file-handling report "audit-ready"?
Most activity logs are a list a reviewer has to trust blindly. An audit-ready report is tamper-evident, and optionally signed. Here's the distinction.
What is a signed erasure certificate, and why does it matter?
A deletion log anyone can edit proves nothing. Here's what a cryptographically signed erasure certificate actually guarantees, and how to verify one yourself.
What is post-quantum encryption, and does your data need it yet?
Quantum computers threaten key exchange, not AES itself. The real distinction, and how hybrid encryption defends against "harvest now, decrypt later."
Is it safe to send files with a link? What the server actually sees
Link-based file transfer usually means a server holds your file in plaintext. Here's what that risk looks like, and how client-side encryption changes it.
What is a SHA-256 checksum and how do you verify a download?
A SHA-256 checksum proves a file arrived intact and untampered. Here's what a hash is, when to check one, and how to verify a download in your browser.
How to send a password securely (stop pasting it in chat)
Pasting a password into chat or email leaves it in logs forever. Here's how to share it safely — encrypted, with nothing stored on a server.
How to redact a PDF properly (black boxes aren't enough)
A black rectangle over text often isn't real redaction — the words are still underneath. Here's what true PDF redaction requires, and how to do it locally.
Is it safe to use online PDF tools? What happens to your uploads
Most online PDF tools upload your document to their servers. Here's what that means for sensitive files — and how to merge, clean, and redact PDFs locally.
What is EXIF data, and how do you remove it from a photo?
EXIF is the hidden data in your photos — GPS, camera model, timestamps. What it reveals, how to see it, and how to strip it before you share.
How to securely erase an SSD (and why overwriting isn't enough)
Overwriting files doesn't reliably erase an SSD — wear-leveling keeps copies. Here's ATA Secure Erase, cryptographic erase, and NIST 800-88 Purge, explained.
PBKDF2 vs Argon2 vs bcrypt — which key-derivation function and why
PBKDF2, Argon2, and bcrypt explained: what a key-derivation function does, how they differ on memory-hardness, and why FileX uses PBKDF2 in the browser.
How to password-protect a PDF for free (without uploading it)
Password-protect a PDF for free, in your browser — no upload, no account. FileX wraps it in strong AES-256-GCM, not a weak native PDF password.
Client-side vs. zero-knowledge cloud encryption — why local wins
"Zero-knowledge" cloud services still upload your files. Client-side tools never do. Here's the difference in threat models, and when each one actually protects you.
The hidden metadata your photos and PDFs leak about you
Every photo and PDF you share carries invisible metadata — GPS coordinates, device details, author names, timestamps. Here's what leaks, why it matters, and how to strip it.
Does deleting a file actually erase it? NIST 800-88, SSDs, and secure erase
Deleting a file usually just hides it — the bytes stay recoverable. Here's what really happens, what NIST SP 800-88 Clear/Purge/Destroy mean, and why SSDs change the game.
How AES-256-GCM keeps your files safe (and what PBKDF2 actually does)
A plain-English walkthrough of the encryption FileX uses — AES-256-GCM, PBKDF2 key derivation, salts, IVs, and the authentication tag that catches a wrong password.