We use AES-256 encryption for stored data and TLS encryption for data in transit. This means your data is protected both when it’s saved and when it’s being transferred.
AES-256 is the strongest and most secure variant of the Advanced Encryption Standard (AES), a symmetric block cipher used globally to protect sensitive data. The "256" refers to the length of the encryption key—256 bits, which makes it nearly impenetrable to brute-force attacks with current technology.
With 2^256 possible key combinations, it would take billions of years for even the most powerful supercomputers today to crack AES-256 using brute force. This renders it practically immune to this type of attack.
AES-256 offers greater protection against potential future threats, including quantum computing. The longer key size provides a larger security margin for data that must remain confidential for decades.
AES-256 is used anywhere the highest level of data protection is required, including:
- Cloud storage services like Google, Amazon Web Services and Microsoft Azure.
- Secure communications protocols such as TLS (Transport Layer Security) for HTTPS websites and VPNs.
- Full-disk encryption on operating systems, including BitLocker for Windows and FileVault for macOS.
- Securing messaging apps like WhatsApp and Signal for end-to-end encryption.
- Government, military and financial institutions for safeguarding top-secret and sensitive information.