The landlord and the key

You would not hand your office key to your landlord. Not because he is a bad man, and not because you have anything unusual to hide. You would not do it because a key you have given away is no longer, in any meaningful sense, yours. It's a piece of paper that says you agree to be trusted.

And yet most of us have done exactly that with our files. We took the whole cabinet — the letters, the drafts, the bank statements, the photos of the children — and put it in a room we don't own, with a lock we did not choose, held open by someone whose name we vaguely recognise from a startup page.

The word we were sold, of course, was secure. It's a slippery word. Most of the time it describes the corridor the file walks down, not the room it ends up in. Encrypted in transit. Encrypted at rest. Encrypted, everyone agrees, right up to the moment the provider decides — or is politely asked, in a language written by lawyers — to decrypt it.

This is the part nobody quite says out loud: if someone else holds the key, the door is not really locked. It's just closed. There's a difference, and you learn it the hard way, usually in the small print.

There is another way to do this, and it is older than the cloud. You keep the key. The file lives in a sealed box on your own machine. The box can travel — you can email it to yourself, drop it in a shared folder, back it up to a hard drive in a shoebox — and it stays sealed the entire time. Wherever it goes, it goes as a stranger. Only your password, held nowhere but in your head, can introduce it.

This is what Elba does, and it's almost embarrassingly modest about it. It draws a fence around a folder on your computer. Inside the fence, your files are yours in the plain, boring sense of the word. Outside the fence, nothing changes. The world can carry on being the world.

There is a downside, and it would be dishonest not to mention it. If you forget your password, the fence stays closed forever. There is no one at the other end of a reset link, because there is no reset link. That isn't a rough edge we ran out of time to sand down. It's the whole point. A door that only you can open is also a door that only you can lose.

You will read, in longer pieces than this one, about hybrid post-quantum keyslots and per-chunk authenticated encryption and hardware security modules. All of that is true, and all of it is in the manual for anyone who wants it. But the human version is smaller. You keep the key. Nobody else has a copy. The building is still standing, but the lock on your door belongs to you.

That's the shift, and it isn't really technical. It's the moment you stop thinking of privacy as a service someone provides you, and start thinking of it as a room you own the key to. A cloud can hold your island. It just can't set foot on it.