The Hardest Working Office Design In America Encrypts Your Data–With Lava Lamps

A wall of 100 lava lamps at Cloudflare’s San Francisco office isn’t just for kitsch effect–it’s quietly encrypting information.

When you walk into the San Francisco office of the cloud network and security firm Cloudflare, you’re greeted by a receptionist–and a giant wall of 100 lava lamps. It isn’t just a throwback to the 1960s. The lava lamps act as a random number generator, helping to encrypt the requests that go through Cloudflare, which make up 10% of all internet requests.


Creating randomness is an essential part of encryption because it lets you create something that an attacker won’t be able replicate. But computers themselves are actually very bad at coming up with random numbers–and that’s by design. “Computers from the beginning have been designed to very reliable, very predictable,” says Cloudflare’s CEO Matthew Prince. “When you turn them on, they always do exactly the same thing and what they’re told to do.”

So while generating randomness isn’t typically a good thing for computers–you wouldn’t want your computer to do something unexpected every time you turn it on–the patterns they rely on make the devices vulnerable to hackers. That’s where random number generators come in. To truly create random numbers, a computer has to rely on phenomena occurring outside the device itself. That could be the movement of the device in space using data from a smartphone’s accelerometer, or it could be derived from mouse movement, or the timing of a user pressing keys on a keyboard.

While Cloudflare uses industry-grade random number generators for its servers, it also decided to incorporate the backbone of its encryption into its office design. Inspired by an idea from engineers at Sun Microsystems, who thought that lava lamps could help generate randomness since modeling how fluid moves within the lamps is incredibly difficult, Prince decided to create an entire wall of lava lamps. Cloudflare calls it the “Wall of Entropy.”

[Photo: Dani Grant]
Cloudflare turns the “Wall of Entropy” into encryption using a camera that photographs the wall every millisecond of every day of the year. Any one of the company’s systems can turn the display of pixels–which changes based on a multitude of factors, like the movement of the lava, the inclusion of anyone who’s walking by, and the shifting daylight–into random numbers. “Any tiny change in that photograph creates a completely random new set of inputs,” Prince says. “It’s like effectively another [die]. Because you can’t predict exactly what that wall of lava lamps looks like in any point in time, 10% of the internet is more difficult for somebody to hack or spy on.”

Throwing dice is how Prince likes to think about adding new random number generator types to Cloudflare’s mix. The lava lamp wall is another set of dice that happens to demonstrate to its customers how encryption works–and also looks great in its office. According to John Graham-Cumming, Cloudflare’s CTO, the lava lamp wall generates 16,384 bits of entropy each time it is used.


The company has installed creative random number generators in its two other main offices in London and Singapore, but neither are quite as visually flashy as the lava lamps. In London, they use dual pendulums. While a single pendulum swinging back and forth is very predictable, mathematicians have shown that if you take a pendulum and hang another pendulum from it, you’ll create a system that no one has figured out how to model. The London office currently has three of these, and they use them to generate random numbers in the same way as the San Francisco office does–using a camera. Visitors to the London office can also press a button and get a random number receipt that uses the outputs from the system to create a QR code, a maze, and a sudoku game.

[Photo: courtesy Cloudflare]
In its Singapore office, Cloudflare uses another more standard type of encryption that relies on the radioactive decay of material. It displays a pellet of uranium encased in a glass bell jar. That might sound scary, but Cloudflare assures me this amount of material is used for school science classes. Using a geiger counter, Cloudflare measures the release of isotopes over time–adding another set of dice to its encryption system.

The installations are a clever way to engage customers when they visit Cloudflare’s offices, making the company’s often opaque services a little more tangible. “Nobody notices us when everything’s working correctly,” Prince says. “The lava lamp wall or pendulum or geiger counter are all ways of us showing and demonstrating what it is that we’re doing behind the scenes.”

About the author

Katharine Schwab is a contributing writer at Co.Design based in New York who covers technology, design, and culture. Follow her on Twitter @kschwabable.