Tresorit - Cloud storage service (FREE) - Mini-Review. (WARNING!)

[IainB]

Originally posted:	2013-12-07
Last updated	2015-06-04

Basic Info

App/Service Name

[attach]

[4wd]

I've also used it since the initial Lifehacker 50GB giveaway, a couple of things to make note of:

• Remember your password - if you forget it then you cannot recover anything in the cloud.
  You can only register for a new account using your original email address and a new password, you will then be prompted to delete your old account.  See here.
• One really annoying drawback of the program, (for me anyway), is it locks files while it's syncing rather than use the Volume Shadow Service or something similar.
  An example: If I compile an AutoIt script, and then try to compile it again because I did a minor edit - that compile will fail because the previously compiled executable is locked while it's being synced.  Probably not a problem for those with multi-Mb broadband but for those of us in the real world, it really is annoying.

[40hz]

Sounds good. And better than nothing.

But unfortunately, even though it's (supposedly) not subject to US law, there's still no real expectation it will be not subject to "special accommodations" or "diplomatic favors" from the Swiss government. Even the countries most vocal about the US spy programs (i.e. France, China, Russia) have their own robust and abusive network espionage systems and laws in place.

And don't forget the IT provisions in all those secret trade agreements and treaties many governments seem so intent on getting signed. Preferably with as little public disclosure as possible.

That's why a technological "solution" is a pipe dream at best. The most it can provide is a temporary sanctuary. And the same goes for oversight committees or changes to the law. Our intelligence communities seem quite comfortable and willing to work outside the rule of law, to say nothing of their being utterly contemptuous of legality in general.

As long as The One Ring exists, it will never be over. Sauron knew what he was doing when he 'gave' his ring technology "as a gift" to the elves, dwarves, and men. Apparently, so too did the US government when it gifted The Internet to planet earth..

[cmpm]

so too did the US government when it gifted The Internet to planet earth..

and GPS...developed originally for the military

[IainB]

so too did the US government when it gifted The Internet to planet earth..

and GPS...developed originally for the military

Oops! Encryption came out of the US military too...

[IainB]

Update 2013-12-13 re "Pre-encryption" (in the table in the opening post).

(b) is encrypted (post-SnowdenGate) and successfully protects against US NSA legal/illegal surveillance, with the encryption keys being unknown to the Cloud service provider.
Note: If you just want this on its own, refer: Pre-encryption makes cloud-based storage safer

[rgdot]

Few months have passed, any new thoughts on Tresorit and other "safe" and encrypted cloud storage? Looking for one just to backup a few files, nothing fancy but as safe as possible these days.

[Deozaan]

Isn't Mega.co.nz supposed to be encrypted end-to-end?

There's also SpiderOak, which has been around for a long time.

[IainB]

Isn't Mega.co.nz supposed to be encrypted end-to-end?
There's also SpiderOak, which has been around for a long time.

Thanks for the suggestions.
I'm not sure whether they meet the suggested 2 essential security criteria, though I think MEGA probably does by now, if it didn't before.
I shall have to investigate and add them to the alternatives list anyway.
In light of @40hz's comments, it might be appropriate to review those two criteria and give them some more precise definition.

[rgdot]

Long awaited

Hi,

I'm Gyorgy, one of the Tresorit founders. We've launched our service more than 2 years ago. Since then, Tresorit evolved into one of the market’s most respected, secure cloud storage services. We have significantly advanced data security, helping thousands of users stay productive.

I'm happy to say that we have finally released Tresorit for Linux. Please take the time now to take it for a spin.

Get Tresorit for Linux here >>

We're currently putting the finishing touches on the app, but aside from a few convenient features, you can store and sync your files securely. You can learn more about the Tresorit for Linux release on our support page.

We look forward to your feedback and are especially interested in knowing what additional features are priorities for you.

Many thanks for being a beta user of Tresorit for Linux.

Best regards,

Gyorgy Szilagyi
Tresorit Chief Product Officer

[MilesAhead]

The 50 GB giveaway still seems to be out there.  I downloaded the program and created an account.  But usage seemed rather awkward.  I uninstalled.

They didn't ask for any payment method and it said 50GB so I'm assuming it is still there if anyone wants to grab it.  

http://www.sparkindark.com/free-50gb-online-encrypted-storage-tresorit.html

[rgdot]

Why awkward?  It is very much in a Dropbox (Sync folder, etc.) concept as far as I can see.

[MilesAhead]

Why awkward?  It is very much in a Dropbox (Sync folder, etc.) concept as far as I can see.

It puts a shortcut in Explorer favorites like OneDrive.  But when I drag a folder there it acts like I still have to drop the folder on the application window.  It pops up something about how drop to folder will be implemented in the future.  So I delete the folder I dragged from the folder it made in Explorer and drop it on the application.  Then it says I now have maxed out my tresores(at 3.)  They are all the same folder.  At that point it went into the not worth the hassle zone.

[rgdot]

Thanks, never tried to drag a folder for it like that.

[MilesAhead]

Thanks, never tried to drag a folder for it like that.

It may be fine.  I'm not Super User by any means.  In fact I have a tendency to go about using applications the wrong way around.  If I didn't already have OneDrive I may have worked it a bit longer. 

[4wd]

It's easier to open the Tresorit window, delete the default tresor that was created when it was installed, and then right-click on a folder in Explorer and choose Create tresor.



You're only allowed three tresors in the free version, (used to be five IIRC), and a maximum file size of 500MB.

[wraith808]

going to the page, there doesn't seem to be a free version of tresorit anymore...

[rgdot]

Free? May not be listed but the exe is the same, you just get less storage and less features for free

[wraith808]

Free? May not be listed but the exe is the same, you just get less storage and less features for free

But you have to be able to make the account.  I have an account, and can still login as my free account.  But it's been removed from the options if you don't already have one from what I can see.

[Vurbal]

According to their website, there's still a free (Basic) version.

[rgdot]

Free? May not be listed but the exe is the same, you just get less storage and less features for free

But you have to be able to make the account.  I have an account, and can still login as my free account.  But it's been removed from the options if you don't already have one from what I can see.

Account creation is part of (during) the install process. For me it was anyway.

[MilesAhead]

Account creation is part of (during) the install process. For me it was anyway.

Yup.  On the promotion I used it gave 50GB storage.

[IainB]

2015-06-04 2025hrs: WARNING! Looks like my review above contains a grievous error/omission of fact.
I had not noticed and so had failed to point out that in the Terms and Conditions of Use 11/11/2013 (see the spoiler that I inserted in the Opening Post at the time) it says:

XIV Inactive Free Accounts
62. If You have chosen a plan with no charge ("Free Account") and if Your Free Account was inactive for at least one-hundred and twenty (120) days and no valid User Plan is bound to Your Free Account, Tresorit will send You a notice. Fifteen (15) days after such notice, Tresorit may suspend Your Free Account or delete all of Your Content related to Your Free Account, and/or we may terminate the Agreement between You and Tresorit.
_______________________________

- and that this point is not mentioned (though it arguably should have been) in the section XIX Termination by Tresorit.

I thought I should post this so that other users who started using Tresorit on my recommendation would be made aware of the facts.
APOLOGY: I sincerely apologise to anyone who might have been discombobulated by this news. I most assuredly would never have recommended Tresorit had I known, or at least not without some major caveats.
=================================

How I discovered this:
I had not needed to add to my workdata archive backup (which is what I intended Tresorit for) for a while, and so had not played about with Tresorit lately, but, prompted by the recent discussions (above), a few days ago I started up my Tresorit and it said the software (GUI) was out-of-date, so the latest version was downloaded and installed.
However, after the software had updated, I was unable to log in. So I logged a service query on the Tresorit Support desk via Submit a request:

​2015-05-30
Unable to log in to Tresorit on desktop - "Wrong email or password".
Yet I have not changed either my email address or password.
Please confirm that my Tresorit account is still active for this email address (xxx@xxx.com).
_______________________________

Tresorit Customer Service responded with an email:

2015-06-02
Hi!
Thank you very much for contacting us.
We can only confirm that your account has been deleted, however if you re-register the 50GB space will be there waiting for you.
Thank you very much for your cooperation, have a nice day!

Best regards,
The Tresorit Team

This email is a service from Tresorit Customer Service. Delivered by Zendesk.
_______________________________

Somewhat confused as to how my account could have been deleted (I didn't recall having done it, and no-one else had access to it), I tried to "re-register" but kept hitting a brick wall.
So I replied to Tresorit Customer Service:

2015-06-02
Thankyou for your email (below).
I went through the re-registration process, which obliged me to delete my account, even though you advise (below) that it is already deleted. There was no change and I was still unable to access the account.
So I repeated the re-registration process - again, no change.

So, I am still stuck at the original state as per my initial request for assistance.
Thus, I am still unable to login to my account with the correct email ID and password, and you advised me that the account has been deleted and gave me directions to re-establish my account, which directions, when followed,  seem not to work (twice).

With all due respect, though the Tresorit blurb claims that the service is "ultra-secure storage and sharing", I am having considerable difficulty seeing how the problems above reconcile with that claim.
​​Could you please explain to me​:

• (a) ​ what Tresorit Co. intended by deleting my account ​in the first place ​(if it indeed has been deleted)​,​ and
• ​(b) ​how you ​now ​propose to ​go about restoring ​the account ​and its contents, from backup, ​to its original status​ and without loss of data,​ and
• (c) ​how you propose to ​go about granting me access, and
• (d) why you have invalidated my account ID and password combination, and
• (e) what steps have been taken to prevent this sort of foul-up happening again and what assurances Tresorit Co. can give me that it will not happen again and that my account and data will remain secure in future?

Thankyou in anticipation of your reply.
Regards,
_______________________________

Tresorit Customer Service replied:
​

2015-06-03:
Hi X.,
Thank you very much for getting back to us.
First of all your account is validated now, so it should work fine.

Let's see:
1. We could only see that your account was in a deleted state that means that either someone deleted it for you (by accessing your email address and initiating the deletion) or you have not logged in to Tresorit for more than 120 days and as per the terms of service we deleted the account. In that case you should have received at least 3 mails telling you to log in.

2. The moment your account is deleted, your files become deleted as well, so we cannot restore them for you.

3. Your login/pwd combination was invalid because the account you tried to access was not accessible anymore.

We can guarantee you that Tresorit never deletes your account only after being inactive for 120 days.

Thank you very much for your cooperation, looking forward to your response, have a nice day!

Best regards,
The Tresorit Team
_______________________________

At the moment, I am still trying to get back into my account, but without much luck so far.
I shall update the opening post regarding the Ts & Cs, and keep this thread updated with further progress.

[mouser]

Although I'm not a user of the program, I wanted to say thank you for the update -- very good information to know 

[Jibz]

That sounds a bit like what happened to my SugarSync account. Apparently, if you haven't logged in for 3 months, they delete your free account unless you pay. They do let you download your data for 7 days, but still ...

You have not used your SugarSync account in over three months. SugarSync periodically deletes accounts that have been inactive for 3 months. To save your data from deletion, please take one of the following actions in the next 7 days:

• Upgrade to an annual plan and never worry about account expiration again.
• Remove your data from SugarSync by following these directions.