Cryptomator

Cryptomator is an open‑source, client‑side encryption tool that protects your files before they ever touch the cloud. By creating password‑protected vaults that live inside your existing sync folders (Dropbox, Google Drive, OneDrive, MEGA, pCloud, Nextcloud, ownCloud, and more), it ensures that only encrypted gibberish reaches remote servers while your originals remain readable only on your devices. There is no account to create and no vendor lock‑in—just transparent encryption you control.

Under the hood, Cryptomator encrypts file contents and names individually, mapping plaintext files 1:1 to encrypted items for fast syncing and minimal overhead. You keep your familiar workflow: unlock a vault, access a mounted virtual drive, and work with documents in your favorite apps. When you lock the vault, access is revoked instantly, and anything left on the provider stays unreadable without your password. Because the project is open source, its code is publicly audited by the security community, increasing trust and eliminating hidden backdoors.

Cross‑platform support covers Windows, macOS, Linux, Android, and iOS, so you can securely access the same vault across all your devices. Desktop releases add conveniences like event overviews and filename decryption for quick identification, while macOS supports biometric unlocking via Touch ID for faster, safer access. On mobile, options like automatic photo upload and encrypted caching balance convenience with security, keeping sensitive data protected on the go.

Setup is straightforward. Create a vault, choose a strong passphrase, and select your cloud sync folder as the storage location. Cryptomator then mounts a virtual drive where you can drag and drop files as usual. Everything written to that drive is encrypted client‑side with modern standards before syncing. No special permissions from your provider are needed, and since there’s no backend service, Cryptomator never sees your data or keys.

Designed for privacy‑first users, journalists, students, and teams handling sensitive documents, Cryptomator emphasizes usability without sacrificing cryptographic rigor. Features like transparent encryption, per‑file synchronization, and open documentation make it a reliable choice for safeguarding tax records, contracts, scans, and backups. If you switch clouds later, your vault moves with you—encryption remains intact and independent.

While Cryptomator does not include built‑in sharing or team management, it pairs well with your provider’s collaboration features: share encrypted vaults with trusted contacts who also use Cryptomator, or export decrypted copies when needed. This modular approach keeps the core simple, auditable, and extensible.

In short, Cryptomator gives you peace of mind: strong, verified encryption, a friendly workflow, and freedom from proprietary ecosystems. Protect your privacy without changing how you work—unlock, work, lock, and let your cloud do the syncing while your secrets stay yours.