Projects / Cryptomator

Cryptomator

Privacy & Security

Encrypt files client-side before cloud upload, using a vault as a virtual drive for everyday file operations.

Use with conditions
Last updatedRelease 2026-06-29
Open source licenseGPL-3.0 (commercial licensing is also offered)
PlatformsWindows · macOS · Linux
DeploymentDesktop

About this project

Cryptomator encrypts files on the user’s device, particularly files stored in cloud-synchronized folders. It groups content into vaults, each protected by its own password. An unlocked vault appears as a virtual drive that applications can use like other storage. Cryptomator translates files written there into encrypted data for the underlying storage location.

Encryption covers file contents and filenames, with directory structure also obscured. The application works with services that synchronize a local folder, including Dropbox, Google Drive, OneDrive, and Nextcloud. Files are read and edited through the unlocked drive, while the separate cloud client transports encrypted files. These applications perform different parts of the storage workflow.

The desktop repository covers Windows, macOS, and Linux. Client-side encryption does not require an account, but storage and cloud synchronization remain the responsibility of the chosen service. Installing Cryptomator does not itself configure cloud storage or create backup copies. Vault passwords, encrypted files, and the availability of the underlying storage still need to be managed.

Decision guide
01

Why it is worth a look

  • Compatible with multiple existing cloud services
  • Native desktop installers
  • No Cryptomator account required for local client use
02

Before you use it

  • Users must safeguard vault passwords and available recovery information
  • Synchronizing encrypted data does not replace independent backups
  • Open-source licensing and commercial relicensing are separate paths; mobile products are outside this desktop scope
Manual setupLow
With an AI agentLow
DeploymentDesktop
Additional requirementsNot verified

Use a supported operating system; Have permission to install local applications; Some requirements have not been verified. Check the official setup instructions.

03

What it can do

  • Local client-side file encryption
  • Filename encryption
  • Virtual-drive access
  • Multiple vaults with independent passwords
  • Works with cloud clients that synchronize local folders

Who it fits

Good for

Adding a local encryption layer to existing cloud storage; People able to manage passwords and backups

Not a fit

Expecting a provider to recover forgotten decryption information

Getting started

  1. Choose a desktop installer from the official website
  2. Create a vault with a test directory and set a password
  3. Verify locking, unlocking, and backups before migrating important files