Hoodik vs Icedrive: An Icedrive Alternative With a Published Design

Icedrive is the best-looking product in this comparison and one of the cheapest. It is also the one making the largest security claims with the least public evidence behind them.

Twofish Is a Cipher, Not a Design

Icedrive's marketing leads with Twofish, positioning it as a stronger choice than the AES that everyone else uses. Twofish is a fine algorithm. Bruce Schneier and his co-authors designed it, it was an AES finalist in 1998, and it has no practical breaks.

That is not the same as knowing your files are safe, for a reason that is easy to miss: a block cipher on its own does not encrypt a file. It encrypts sixteen bytes. Turning it into file encryption requires a mode of operation, an authentication scheme, key derivation, nonce handling, and key wrapping, and essentially every real-world encryption failure of the last twenty years happened in those parts rather than in the cipher.

Icedrive has not published which mode it uses, how keys are derived or wrapped, or whether ciphertext is authenticated at all. Authentication is the one to care about. Modern designs use AEAD ciphers so that ciphertext modified in transit or on the server fails to decrypt loudly. A block cipher used in an unauthenticated mode will happily decrypt tampered ciphertext into altered plaintext, and the user sees no error. Whether Icedrive gets this right is unknown to anyone outside Icedrive, because there is no specification and no third-party cryptographic audit.

Hoodik uses AEGIS-128L, an authenticated cipher, with Ascon-128a and ChaCha20-Poly1305 also supported and the choice recorded per file. File keys are wrapped with a hybrid of X25519 and ML-KEM-768, the post-quantum KEM standardized by NIST. Authentication uses OPAQUE, so your password never leaves your device. All of that lives in the cryptfns and transfer crates, which are public Rust, and every Hoodik client calls into them rather than reimplementing the crypto per platform. You can read the construction instead of taking anyone's word for it.

Hoodik has not had a full third-party cryptographic audit either, and it is worth being straightforward about that. The difference is that the design is public, so the absence of a paid audit does not also mean the absence of any possibility of review.

Encryption Is One Folder, on Paid Plans Only

The second thing the marketing understates. Icedrive's client-side encryption applies to a dedicated Encrypted folder, not to your account. Files stored anywhere else are encrypted with keys Icedrive holds and can decrypt. The feature is also restricted to paid plans, so the 10 GB free tier has no zero-knowledge storage at all.

As with pCloud, files inside the encrypted folder lose search, previews, and thumbnails, because the server cannot read them. The predictable result is that most users leave most files outside it.

Hoodik has one mode. Everything is encrypted on the client before upload, file and folder names included, and the encrypted files remain searchable: a BERT tokenizer runs on your device, each token is hashed with SHA256, and only hashes reach the server for matching. Thumbnails are generated and encrypted client-side, then decrypted for display. You do not choose between protection and usability.

Jurisdiction Is Worth a Note

Icedrive is a UK company. The UK is a Five Eyes member, and under the Investigatory Powers Act its government can issue a technical capability notice compelling a provider to remove or bypass protections, along with a gag order preventing disclosure. This is not hypothetical: in February 2026 the Home Office served exactly such a notice on Apple, which responded by withdrawing Advanced Data Protection for UK users rather than building a backdoor.

Apple could absorb that. A small provider receiving the same notice has fewer options and cannot tell you it happened.

End-to-end encryption is what limits the damage, which is exactly why an unpublished, unaudited implementation is a poor place to be relying on it. With Hoodik you choose the jurisdiction: self-host wherever you like, or pick the EU or US region on Hoodik Cloud, on code whose behavior is public.

Where Icedrive Wins

Price. Around $4.17/month for 1 TB, and lifetime plans starting near $299. That is much cheaper per gigabyte than a dedicated Hoodik Cloud instance, and the lifetime option has no Hoodik equivalent.

The interface. Icedrive's web and desktop apps are genuinely well designed, and the Windows virtual drive mounts cloud storage as a real drive letter without consuming disk space. Hoodik has no Windows client and no virtual drive.

The free tier. 10 GB, unencrypted, against a 14-day Hoodik Cloud trial.

Who Should Use Which

If you want cheap storage with a pleasant interface and a one-time payment, and encryption is a bonus rather than the requirement, Icedrive is a reasonable buy at the price.

If you are choosing a provider because of the encryption, the claims need to be checkable, the coverage needs to be the whole account rather than one folder, and the ciphertext needs to be authenticated. Icedrive currently offers none of those in a form anyone outside the company can confirm.

Hoodik Cloud is €9/month for 100 GB or €19/month for 500 GB, in the EU or US, with a 14-day trial. Self-hosting is free, has no storage cap beyond your disk, and runs the same code you can read on GitHub.