Knowledge baseGetting Started

Understanding Zero Trust Platform

~2 min read

Zero Trust is a cybersecurity paradigm that challenges the traditional assumption that everything inside a network is safe. Instead, it operates under the assumption that no entity, whether inside or outside the network, can be inherently trusted. Every access request, even from authenticated users, is verified and validated before being granted access to resources.

How SharePass Implements Zero Trust:

  • End-to-End Encryption: SharePass leverages robust encryption mechanisms to ensure that data remains encrypted throughout its journey, from sender to recipient. This means that even if intercepted, the data remains indecipherable (even for SharePass).
  • Symmetric Key Exchange: When sharing a secret, SharePass creates a symmetric encryption key on the sender’s device, which is never shared with SharePass itself. This “zero knowledge” approach ensures that SharePass doesn’t have access to the encryption key or the content of the secret.
  • Recipient Authentication: SharePass ensures that only authorized recipients can access the shared secret. This is achieved through various authentication mechanisms, such as security keys, multi-factor authentication, and more.
  • No Data Storage: SharePass follows the principle of not storing any plain-text secrets on its servers. The encrypted data is transient, ensuring that sensitive information remains secure and inaccessible to unauthorized parties.
  • Verification Layers: SharePass implements a security funnel with multiple layers of verification, ensuring that only authorized individuals can access shared secrets. This funnel includes checks for validity, existence, visibility, availability, accessibility, authorization, decryption, and finally, revealing the plain-text secret.

By adhering to these Zero Trust principles, SharePass ensures that your data remains in your control throughout its lifecycle. This approach minimizes the risk of unauthorized access and data breaches, providing you with a robust and trustworthy platform for secure data sharing.