Sign-in that phishing can't beat
Use passkeys with Face ID, Touch ID or a hardware key, or a one-time code from an authenticator app. Admins can require a second factor for everyone and approve each new device.
- Passkeys (WebAuthn) and TOTP two-factor
- Password policies, lockout after failed attempts and login history
- Sign out or wipe a lost device remotely
Password
Checked against your organization's policy
Passkey
Touch ID on this Mac
New device check
Approved by an admin
Every upload is scanned
New files are checked for malware on our servers before anyone can open or share them. Infected files are quarantined and the uploader and admins are notified.
- Scanning on upload, on sync and on file requests
- Quarantine instead of silent deletion
- File type policies to block risky extensions
- site-survey.pdf
- drone-footage.mp4
- invoice-scan.exe
- floor-plan.png
Scanning runs on our own servers. Files never go to an outside service.
Rewind a folder after ransomware
Because every file keeps its revisions, a burst of mass renames or encrypted files is easy to spot. OCA Drive flags it, pauses sync for that device, and lets you roll the folder back to any minute before it started.
- Detection of mass renames and encrypted extensions
- Point-in-time restore for a whole folder
- Trash with 30-day retention for everything else
Changes per minute
Also on security
Encrypted vaults
Optional end-to-end encrypted folders whose keys never leave your devices.
Single sign-on
OIDC and SAML with your own identity provider, such as Keycloak or Authentik.
Data loss prevention
Policies that detect sensitive data in files and block risky sharing.
Retention and legal hold
Keep files for as long as regulations require, even if someone deletes them.
Keep exploring
Talk to us about your security review
Create your drive in a minute, install the apps on every device, and upgrade when your team grows.