Zero-Knowledge · Self-Custody · Decentralised

Your files.
Unreadable to anyone
but you.

BlockDrive encrypts every file in your browser before it leaves your device. Not even we can read what you store — mathematically, not just by policy.

How it works ↓
Built on
SCPrime Secured by
CorePass Paid via
CorePay
client-side encryption PLAINTEXT
File
Folder
Content
AES-256-GCM · per-chunk IV chunk 0/12 → SCPrime
How the data flows

From your device to 870+ hosts —
sealed the whole way.

01
Sign with CorePass
Your Ed448 private key signs a fixed message. The signature is deterministic — the same identity always produces the same result, on any device.
SHA-256(sig) → AES-256 key
02
Encrypt in your browser
Every file and filename is encrypted locally before anything leaves your device. Plaintext never touches the network.
AES-256-GCM · per-chunk IV
03
Pass through BlockDrive
We route the ciphertext to storage. We hold no decryption key — what reaches us is already unreadable, and stays that way.
no decryption key on server
04
Scatter across SCPrime
Erasure-coded fragments spread across 870+ independent hosts worldwide. No single host holds enough to reconstruct — or read — a file.
Reed-Solomon · no trust per host
Under the hood

Four steps.
Zero server-side access.

Key from your identity
CorePass signs a fixed message with your Ed448 private key. The signature is deterministic — the same key always produces the same result, on any device.
SHA-256( CorePass.sign(
  "BlockDriveEncryptionKeyV1"
) ) → AES-256 key
Encrypted before upload
Every file is split into 50 MB chunks and encrypted in your browser using AES-256-GCM with a unique random initialization vector per chunk — ensuring that even identical data produces different ciphertext every time. File names and folder names are also encrypted individually before storage. The server receives only ciphertext — no plaintext ever leaves your device.
filename = AES_GCM(name, key)
for chunk in file:
  iv = random(12 bytes)
  send( AES_GCM(chunk, iv, key) )
Stored across 870+ hosts
Encrypted chunks are distributed across the SCPrime network using erasure coding. No single host holds enough data to reconstruct a file — and none can read it anyway.
Reed-Solomon erasure coding
redundancy across hosts
no trust required per host
Pay with CorePay
Storage is billed via CorePay — decentralised payment links across multiple providers worldwide. Pay with your preferred asset, no credit card or bank account needed. Payments are confirmed with a cryptographically signed webhook.
pay with your preferred asset
multi-provider · signed webhooks
no credit card · no bank required
Properties

What zero-knowledge means in practice.

Encryption
AES-256-GCM
Industry-standard authenticated encryption. Each chunk has its own unique random initialization vector, preventing any patterns in the encrypted output.
Key derivation
Ed448 + SHA-256
Your private key never leaves CorePass. We see only a signature.
Storage
SCPrime
Decentralised, erasure-coded across 870+ independent hosts worldwide.
Identity
CorePass
No password, no email. Your CoreID is your account — and your key. corepass.net
Recovery
None
Your 24-word recovery phrase and PIN are the only way back into your CorePass identity — and therefore the only way back into your files. Lose them, and access is gone permanently. There is no password reset, no backup key, no support escalation. Back them up before you store anything.
Server access
None
BlockDrive stores only ciphertext. A subpoena cannot produce what we don't have.
Cross-device
Same key
Ed448 signatures are deterministic. Any device with your CorePass derives the same key.
File names
Encrypted
File and folder names are encrypted client-side before storage. The server and storage layer see only opaque ciphertext — directory structure is fully hidden.
Account ID
SHA-256 hashed
Your CoreID is never stored in plaintext. Storage buckets use a SHA-256 hash of your identity — the storage layer cannot link data to a person.
Payment
CorePay / XCB
Pay with your preferred asset via CorePay — multi-provider, no credit card or bank account required. corepay.money
A deliberate limitation

Why there's no file sharing.

The moment a third party can grant access, that third party can also see what's being accessed.

Sharing a file with someone means giving them — or a server in between — a way to decrypt it. That's how every other cloud storage service works, encrypted or not.

BlockDrive doesn't make that compromise. Your encryption key is derived only from your own CorePass identity — nobody else's signature can produce it, and we have no mechanism to grant access on your behalf. What you store is yours alone. If you need to share something, send the file directly — outside BlockDrive.

Status: Beta

Start storing.
10 GB free during beta.

BlockDrive is under active development. The service may contain bugs or experience downtime. Critical data should always be maintained in multiple independent locations.

Get Started
No email · no password · no credit card — just CorePass.