Contact Tresorit Support

Sound two-factor authentication (2FA) is a requirement for even moderate security. Tresorit's 2FA requires enabling either phone or email factors, which are so insecure as to be barely better than nothing; essentially checkboxes for marketing. To add insult to injury, Tresorit supports neither hardware keys, e.g., Yubikeys, nor backup codes. All this despite public requests from users with years-old responses from Tresorit saying fixes for these are on their list. These would be bad enough from a free service making no special claims of security. From a pricey service marketing security as its primary differentiator, it's embarrassing.

This app only does a good job of protecting data in transit or at rest on tresorit servers. It does not provide local protection of data at rest. For price they charge the security should be complete. I would like to see the application data encrypted when the app is not running. At minimum this app should use elevated iOS data protection classes for when the app is not active. Yes, I realize my iPhone has encryption by default but you know how often my phone and everyone else is in a fully powered down and encrypted state? Maybe 0.001% of the time.

This is more about the service in general rather than this app. They charge $30 per month, then impose a “device limit”. The desktop app frequently crashes, and has lost data on two occasions. Doesn’t work when I need it. And recently they dropped the “unlimited file history” which was a major reason I got it. Going to switch to Dropbox with encfs