Cryptomator
A multi-platform desktop application that provides client-side encryption for cloud storage files, ensuring privacy and control.
What is Cryptomator?
Cryptomator is a desktop application that provides client-side encryption for files stored in cloud services like Dropbox, Google Drive, and OneDrive. It encrypts data locally before uploading, ensuring that only the user holds the decryption keys and cloud providers cannot access the plaintext content. The tool creates a virtual drive where users can work with their files transparently, with automatic encryption and decryption handled in the background.
Individuals and professionals who use cloud storage services and need to protect sensitive files from unauthorized access, including those concerned about cloud provider privacy policies or data breaches.
Developers and privacy-conscious users choose Cryptomator because it is open-source (ensuring no backdoors), requires no accounts, and gives full client-side control. Its transparent operation and strong AES-256 encryption provide robust security without complicating the user experience.
Overview
Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.
Use Cases
Best For
- Encrypting sensitive documents before storing them in public cloud services
- Protecting personal data from cloud provider access or surveillance
- Adding an extra layer of security to business files synced via services like Dropbox or OneDrive
- Ensuring privacy for legal, financial, or medical documents in the cloud
- Creating encrypted vaults for different projects or clients within a single cloud account
- Securing files on cross-platform environments (Windows, macOS, Linux) with a consistent tool
Not Ideal For
- Teams or individuals requiring mobile access to encrypted cloud files, as Cryptomator is desktop-only
- Projects needing server-side encryption or API integration for automated cloud workflows
- Organizations that require centralized user management, key escrow, or enterprise-grade compliance features
Pros & Cons
Pros
Native applications for Windows, macOS, and Linux ensure consistent encryption across major desktop operating systems, as highlighted in the README's features.
Works with Dropbox, Google Drive, OneDrive, and others, allowing encryption for any cloud that syncs locally, per the README's list of supported services.
Uses AES-256 encryption with encrypted file names and obfuscated folder structures, providing robust security without relying on cloud providers, as detailed in the README.
No accounts required and sensitive data is wiped from memory promptly, emphasizing user control and minimal data exposure, as stated in the privacy section.
Cons
Cryptomator is limited to desktop platforms, making it unsuitable for users who need to access encrypted files on smartphones or tablets, a gap not addressed in the README.
Building from source requires JDK 25 and Maven 3, which can be a barrier for developers wanting to customize or contribute, as outlined in the building instructions.
Relies solely on user-managed passwords with no built-in key recovery, meaning lost passwords result in permanently inaccessible data, a trade-off for enhanced security.
Frequently Asked Questions
Related Projects
certbotCertbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.
SopsSimple and flexible tool for managing secrets
LuLuLuLu is the free open-source macOS firewall
VeraCryptDisk encryption with strong security based on TrueCrypt
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.