CNET Editors' review
CryptoHeaven is an encryption utility optimized for secure Internet communication. You can use it to send secure and anonymous e-mail and instant messages, post safely and privately in online chatrooms and forums, and safely store, share, and distribute files online. It offers both free and premium individual and multiuser encryption services and the latest encryption technology, such as no third-party keyholders and algorithms that basically take longer than the age of the universe to break.
Downloading and installing CryptoHeaven is easy, and so is signing up for a free account. The odd nag screen extols the advantages of the full version, such as greater capacity for messages and files, stronger encryption, and multiple accounts. Logging in calls up CryptoHeaven's main window, which is much like an e-mail client in layout and function. Excellent documentation amply illustrated with screen shots walks new users through the basics of using CryptoHeaven, such as its Folder Tree and its Context Sensitive Folder View. There's also a "digital safe deposit box" for secure online storage.
Like most secure online communication tools, both parties must have active CryptoHeaven accounts, and each must be in the other's contact list, to send or receive protected e-mail, instant messages, or file transfers. However, with more and more business being done online and with a growing threat from cybercrime, it's a wise precaution that's well worth the effort to set up and use. The premium version offers expanded online storage and multiple user capabilities at various prices for advanced and enterprise users.
CryptoHeaven will allow you to send your files without having to worry about unwanted users reading them. Send and receive secure and anonymous email. Backup, store and share files online securely. Chat and exchange secure instant messages, create secure message boards and share document folders.
What's new in this version: Version 3.7.6 build 756 has improved stability on intermittent connections and cellular networks and cleaned up some repetitive online/offline notifications.
More Products to Consider
- Protect your PC against the latest viruses and spyware.
- Protect your computer from viruses and malicious programs.
- Detect and quickly remove malicious threats to your computer.
- Provide secure, anonymous, and private browsing on Wi-Fi hotspo...
- Search your hard disk and Registry for threats to your security...
- Detect and eliminate viruses, get free protection for home user...
- Download and exchange files safely, enjoy games and Web surfing...
- Record and view every keystroke typed on keyboard.
- Secure your connection to public Wi-Fi networks with premium VP...
- Keep your business safe when e-mailing or going online.
- Protect your personal home computer from malware attacks.
- Detect and remove spyware, malware, rootkits, trojans, hijacker...
- Protect your PC against viruses, spyware, Trojans, worms, rootk...
- Stay anonymous, change your IP address, and protect your comput...
- Protect your Windows PC from online threats.
- Get a file transfer application.
- Retrieve Hotmail or MSN Messenger passwords for your local comp...
- Encrypt and decrypt files using WISeKey certificates.
- Detect and clean thousands of threats.
- Monitor and record chat conversations on your PC or network.
- Email plug-in insures intended attachments are included with th...
- View and edit most graphics formats simply and quickly.
- Encrypt and secure text within your files.
All versions:3.0 stars
out of 2 votes
Current version:0 stars Be the first to review this product
My rating:Write review
Results 1-2 of 2
"Very disappointing, does not appear to be legit service"
Version: CryptoHeaven 3.7.4 build 742
I liked using this for about a year, no annoying adds and an appearance of being "secure."
Have used CryptoHeaven for about a year and it worked fine. I have even recommended to various colleagues and other companies. I recently purchased another company account with multiple users, but needed to cancel the order. While they state a 30-day money back guarantee, that does not seem to be the case. They charged my credit card twice in one month, which is the reason for canceling service. Sent multiple e-mails to customer service/tech support. Received no response for two weeks. I was then referred to an 800 (actually 877) number to resolve the issue. I have tried for 3 days in a row, and I get a "this mailbox is full you cannot leave messages for this subscriber." Was this a legit company that went bad?
Will never use them again and would caution new subscribers to conduct due diligence on this company before trusting your comms to them.
"This product provides superb email security and..."
Version: CryptoHeaven 22.214.171.1244
...offsite file storage!
This review was originally posted on VersionTracker.com.
I have already posted my comment in other places, and I'll copy them here as people may be interested:
Looking at the CryptoHeaven source code (downloadable at the CH web site ) I can confirm that all of the messages and files stored on the server are in an encrypted form. Too bad the server code is not available, but noone wants to work for free so I can understand that...
Basically the administrators of the system have no way of knowing what is being stored on the servers because all root keys in the encryption chains end up on customer's PCs (always encrypted) or stored encrypted with customer's own passphrases which never leave their computers, nor are stored anywhere. As far as I can tell, this is a major difference between CryptoHeaven and most other online storage providers which only make the connectivity SSL secure, but not the data residing on the servers to which sys admins have access to.
The system looks to be one of a few which really delivers the level of security it claims leaving little unsaid. Although it seems possible to privately implement additional algorithms like ECC and use it to communicate with your buddies (because the code is freely available), the copyright forbids it, and there are good reasons for that too. What I would like to see is integration with PGP so that we can start sending and receiving secure mail with an already established PGP user base.
I have read somewhere that symmetric key length and hash length used are not equivalent in their cryptographic strength. This claim is irrelevant as the hash seems to be used "for display purpose only" and not in the security protocols. I have yet to see a non-encrypted hash of anything on the system, so this looks good too.
Interesting is that they cannot reset your password in case you loose it. My explanation for this is because your private key (if stored on the server) is encrypted with the hash of your password, so you must have your original password to be able to decrypt your private key. If they were to reset it, your private key would have to be re-crypted with the hash of your new password, but to do that you still need the old password to decrypt it in the first place. Cleaver.
Passwords are often the weakest links in security and to rectify that, YOU CAN STORE YOUR PRIVATE KEY LOCALLY (always encrypted). This is something that is not possible with systems like Hushmail and many others.
Perhaps ability to sign other's keys and revoke signatures would create additional web of trust, but, oh well, you can't have everything.
The functionality is great; someone wrote they are putting 'all the eggs in one basket', however it may be an attempt to do just that, there is still long way to go. Never less, it is a very usable and user-friendly product which is much more than just online storage!