Subscribe / Unsubscribe Enewsletters | Login | Register

Pencil Banner

Peerio hands-on: This secure messaging suite packs dead simple end-to-end encryption

Ian Paul | Jan. 16, 2015
The brain behind Cryptocat and miniLock is back with yet another tool designed to make your day-to-day life more secure. Peerio, Nadim Kobeissi's latest creation, is a cloud-based, end-to-end encrypted communications suite that lets you send messages and share files as easily as you use Gmail or Skype's IM tool.

Once you send a file it creates a new message under the Messages tab. Once sent, the user on the other end has the option to download the file to their PC in an unencrypted state. Peerio also has a nice feature called Destroy that lets you wipe your file from Peerio's servers and make it unavailable to other users — save those who have already downloaded it, of course.

Peerio's encrypted messaging is also very simple to use and feels like a hybrid between webmail and instant messaging. To start a new message, open the Messages tab, select Compose Message, and create an conversation just as you would in Gmail or whatnot.

After you've sent the first message, Peerio works like IM, with replies appearing in real-time. You'll also receive pop-up notifications in the corner of your screen if you have the Peerio window minimized and somebody sends you a message (at least with the Chrome app).

By default, Peerio has the habit of sending you email alerts every time you receive a new message — handy if you don't have the program active, but annoying if you do.

To turn this off, hover over your name in the upper right corner of the app and select Preferences. In the pop-up window that appears unselect the checkbox under Notifications. The ability to only receive a single email alert for the first message in a new conversation, or the first new message in an existing conversation after a predetermined period, would be a handy feature to include in a future update.

Encryption

Peerio works similarly to miniLock in the sense that your decryption key is tied to your password. Log out of your app and your key is erased; log back in and decryption is possible again. The beauty of this set-up is that you can log in to Peerio on any device with the same password.

All your files are encrypted on your PC before they are sent to Peerio's servers, making it impossible for the company to peek at your data or allow others to do so.

At least that's what we believe is the case. As with miniLock, we'll offer no judgement on the quality of Peerio's encryption. All we can tell you is that Wired reports the code has been reviewed by Cure53 — the same firm that audited miniLock. The security testing firm found no encryption weaknesses in Peerio's code. As this is a beta, Peerio may very well have vulnerabilities that have to be solved. Nevertheless, Peerio appears to be off to a very solid start.

Peerio is available now from the company's website.

 

Previous Page  1  2 

Sign up for MIS Asia eNewsletters.