Cryptomator

cryptomator.org
Awesome Privacy ➔ Essentials ➔ File Encryption ➔ Cryptomator
Cryptomator

Open source client-side encryption for cloud files - Cryptomator is geared towards using alongside cloud-backup solutions, and hence preserves individual file structure, so that they can be uploaded. It too is easy to use, but has fewer technical customizations for how the data is encrypted, compared with VeraCrypt. Cryptomator works on Windows, Linux and Mac - but also has excellent mobile apps.

Avoid

  • VeraCrypt
  • BitLocker
  • FileVault
  • AxCrypt
  • WinRAR

Also Consider

Open Source

Cryptomator Privacy Policy

Privacy Policy Summary

  • There is a date of the last update of the agreements
  • The service claims to be GDPR compliant for European users
  • This service tracks which web page referred you to it
  • You are not being tracked
  • Third parties are involved in operating the service
  • Your IP address is collected, which can be used to view your approximate location
  • An anonymous payment method is offered
  • The data retention period is kept to the minimum necessary for fulfilling its purposes
  • Your personal data is used for limited purposes

Score

C

Documents

About the Data

This data is kindly provided by tosdr.org. Read full report at: #4403

Cryptomator Source Code

Author

cryptomator

Description

Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.

#cloud-storage#crypto#cryptography#cryptomator#encryption#java#privacy#security

Homepage

https://cryptomator.org

License

GPL-3.0

Created

02 Feb 14

Last Updated

16 Jun 26

Latest version

nightly

Primary Language

Java

Size

34,188 KB

Stars

15,312

Forks

1,299

Watchers

15,312

Language Usage

Language Usage

Star History

Star History

Top Contributors

Recent Commits

  • Armin Schrenk (10 Jun 26)

    Merge pull request #4243 from cryptomator/feature/not-a-vault-dir Feature: Improve UX when importing vaults with invalid structure

  • Copilot (03 Jun 26)

    Bump Maven Wrapper distribution to Apache Maven 3.9.16 (#4247) * Add Maven Wrapper and migrate Maven invocations --------- Co-authored-by: copilot-swe-agent[bot] <[email protected]>

  • Armin Schrenk (03 Jun 26)

    Merge branch 'develop' into feature/not-a-vault-dir

  • Armin Schrenk (03 Jun 26)

    Upgrade project JDK version from 25 to 26 references #4244

  • Armin Schrenk (03 Jun 26)

    Merge pull request #4244 from cryptomator/feature/jdk26 Feature: JDK 26

  • Armin Schrenk (03 Jun 26)

    cleaner errro report for invalid vaults

  • Armin Schrenk (03 Jun 26)

    prevent duplicates when adding same vault several times do checking and adding on the fx thread.

  • Armin Schrenk (03 Jun 26)

    Prevent any blocking questions when adding coffeelibs repo

  • Armin Schrenk (02 Jun 26)

    cleanup

  • Armin Schrenk (02 Jun 26)

    Place vault storage location check in separate functions

  • Armin Schrenk (02 Jun 26)

    Replace openjdk by coffeelibs-jdk again Signed-off-by: Armin Schrenk <[email protected]>

  • Armin Schrenk (01 Jun 26)

    Revert "test if signing issue is fixed with temurin" This reverts commit 602c206dae3cd393b7fc271dbe4270ca17115c86.

  • Armin Schrenk (01 Jun 26)

    Bump jdk to 26 (or 26.0.1+8)

  • Copilot (18 May 26)

    Add dependency-check suppressions for new Jetty CVEs (#4241) Agent-Logs-Url: https://github.com/cryptomator/cryptomator/sessions/7fec8174-cf7f-4860-9a62-1299e45a5ca6 Co-authored-by: copilot-swe-agent[bot] <[email protected]> Co-authored-by: infeo <[email protected]>

  • Armin Schrenk (12 May 26)

    enhance message

  • Armin Schrenk (12 May 26)

    Run validation on non-fx thread old code can still run it on fx thread

  • Armin Schrenk (12 May 26)

    Show user improved error message

  • Armin Schrenk (11 May 26)

    Throw more specific error about vault directory

  • Armin Schrenk (05 May 26)

    test if signing issue is fixed with temurin

  • Armin Schrenk (04 May 26)

    fix win-update-url

  • jose-cardoso-a22506616 (04 May 26)

    Merge pull request #4228 from jose-cardoso-a22506616/issue-3993 Closes #3993

  • Armin Schrenk (29 Apr 26)

    Use JDK 26.0.1+8

  • Armin Schrenk (29 Apr 26)

    Also use new template properties file in CI

  • Armin Schrenk (29 Apr 26)

    Fix wixhelper.dll not found file is named now msica.dll

  • Armin Schrenk (28 Apr 26)

    Closes #4219

  • Armin Schrenk (28 Apr 26)

    update windows build script to stop on errors

  • Armin Schrenk (27 Apr 26)

    Merge pull request #4227 from yugui923/fix/vault-options-mount-scroll fix(ui): make vault options mounting tab scrollable

  • Armin Schrenk (27 Apr 26)

    Fix release workflow "workflow_call" is not a event name

  • Armin Schrenk (27 Apr 26)

    Merge pull request #4205 from cryptomator/feature/immutable-releases Feature: Refactor Release pipeline to allow immutable releases

  • Yuri Gui (25 Apr 26)

    fix(ui): make Vault Options "Mounting" tab scrollable Wrap the mounting-options VBox in a ScrollPane so that conditionally shown rows (drive-letter selector, custom mount-point picker, custom mount flags) remain reachable when the Vault Options window is at or near its 300px minimum height. Previously the rows were clipped past the bottom of the tab with no scrollbar, forcing the user to enlarge the window manually before the controls could be seen or interacted with. Fixes #3150 Co-Authored-By: Yuri Gui <[email protected]>

Cryptomator Security

6.3/10

Repo Security Summary

Updated 25 May 26

  • Security-Policy 10/10
  • Code-Review 4/10
  • CII-Best-Practices 0/10
  • Maintained 10/10
  • Dangerous-Workflow 10/10
  • Binary-Artifacts 9/10
  • License 10/10
  • Packaging N/A
  • Branch-Protection N/A
  • Fuzzing 0/10
  • Token-Permissions 0/10
  • Signed-Releases 8/10
  • Pinned-Dependencies 10/10
  • SAST 0/10

Security Advisories (9)

  • medium Unpatched CVSS 4.8

    CVE-2026-33472 Bypass of CVE-2026-32303 fix: `getAuthority()` port-based scheme confusion allows HTTP downgrade of Hub token exchange

  • low Patched

    GHSA-q8q3-2cf9-cxrp Release pipelines trust unverified executable downloads

  • medium Patched CVSS 4.1

    CVE-2026-32310 Unverified masterkeyfile key IDs can access arbitrary local or UNC paths

  • high Patched CVSS 7.6

    CVE-2026-32303 Tampered vault configuration allows MITM attack on Hub API

  • high Patched

    CVE-2026-32309 Hub unlocking accepts plaintext HTTP and unvalidated endpoint schemes

  • low Patched CVSS 2.2

    CVE-2026-29110 Leaking of cleartext paths into log file in non-debug mode

  • low Unpatched CVSS 3.3

    GHSA-qwfw-w5qf-7wcj Ciphertext file contents of two files can be exchanged

  • medium Patched

    CVE-2023-39520 MSI installer allows Local Elevation of Privileges #2

  • medium Patched

    CVE-2023-37907 MSI installer allows LPE

Cryptomator Website

Website

Cryptomator - Free & Open-Source Cloud Storage Encryption

Cryptomator is an open-source encryption tool for secure cloud storage. Protect your privacy for free on Dropbox, Google Drive, OneDrive, and more.

Redirects

Does not redirect

Security Checks

All 65 security checks passed

Server Details

  • IP Address 172.67.132.219
  • Location San Francisco, California, United States of America, NA
  • ISP CloudFlare Inc.
  • ASN AS13335

Associated Countries

  • US US
  • NL NL

Safety Score

Website marked as safe

100%

Blacklist Check

cryptomator.org was found on 0 blacklists

  • AntiSocial Blacklist
  • Artists Against 419
  • Badbitcoin
  • Bambenek Consulting
  • CERT Polska
  • CoinBlockerLists
  • CRDF
  • CryptoScamDB
  • EtherAddressLookup
  • EtherScamDB
  • Fake Website Buster
  • MetaMask EthPhishing
  • NABP Not Recommended Sites
  • OpenPhish
  • PetScams
  • PhishFeed
  • PhishFort
  • Phishing.Database
  • PhishStats
  • PhishTank
  • Phishunt
  • RPiList Not Serious
  • Scam.Directory
  • SecureReload Phishing List
  • Spam404
  • StopGunScams
  • Suspicious Hosting IP
  • ThreatFox
  • ThreatLog
  • TweetFeed
  • URLhaus
  • ViriBack C2 Tracker

Website Preview

Website preview
View full report at web-check.xyz

Cryptomator Android App

APK Info

  • App
  • Creation Date Invalid Date
  • Last Updated Invalid Date
  • Current Version

De-Googled Compatibility

Native 4.00 / 4 5 ratings
microG 4.00 / 4 2 ratings
  • GrapheneOS Native 4.0 / 4 (5)

Tested on Android 14–16 · Updated 23 Nov 25 · View on Plexus →

Trackers

No trackers found

Permissions

No permissions required

Cryptomator iOS App

App Info

Cryptomator: Protect Privacy

With Cryptomator, the key to your data is in your hands. Cryptomator secures and encrypts your sensitive data in your favorite cloud service. So you can rest assured that only you can access your data. EASY-TO-USE Cryptomator is a simple tool for digital self-defense. It allows you to protect your cloud data by yourself and independently. • Simply create a vault and assign a password • No additional account or configuration needed • Unlock vaults with Face ID / Touch ID • Fully integrated into the Files app COMPATIBLE Cryptomator is compatible with the most commonly used cloud storages and available for all major operating systems. • Compatible with iCloud Drive, Dropbox, Google Drive, OneDrive, SharePoint (incl. Microsoft Teams), pCloud, Box, WebDAV- and S3-based cloud storage services • Create vaults in any location via other File Providers (third-party apps must support this) • Access your vaults on all your mobile devices and computers SECURE You don't have to trust Cryptomator blindly, because it is open source software. For you as a user, this means that everyone can see the code: https://github.com/cryptomator/ios • File content and filename encryption with AES and 256 bit key length • Vault password is secured with scrypt for enhanced brute-force resistance • Crypto implementation is publicly documented AWARD-WINNING Cryptomator received the CeBIT Innovation Award 2016 for Usable Security and Privacy. We're proud to provide security and privacy for hundreds of thousands of Cryptomator users. CRYPTOMATOR COMMUNITY Join the Cryptomator Community and participate in the conversations with other Cryptomator users: https://community.cryptomator.org • Follow us on Mastodon @[email protected] • Like us on Facebook /Cryptomator --- Terms of Use: https://www.apple.com/legal/internet-services/itunes/dev/stdeula/

Rating

Rated 4.36 out of 5 stars by 397 users

Version Info

  • Current Version 3.1.0
  • Last Updated 27 May 26
  • First Released 21 Dec 21
  • Minimum iOS Version 16.0
  • Device Models Supported 127

App Details

  • IPA Size 94.44 Mb
  • Price Free (USD)
  • Age Advisory 4+
  • Supported Languages 37
  • Developer Skymatic GmbH
  • Bundle ID org.cryptomator.ios

Screenshots

Cryptomator Reviews

More File Encryption

  •
    age

    age

     age-encryption.org

    age is a simple, modern and secure CLI file encryption tool and Go library. It features small explicit keys, no config options, and UNIX-style composability

    Open Source FiloSottile/age
    View age Report
  • VeraCrypt

    VeraCrypt

     veracrypt.fr

    VeraCrypt is open source cross-platform disk encryption software. You can use it to either encrypt a specific file or directory, or an entire disk or partition. VeraCrypt is incredibly feature-rich, with comprehensive encryption options, yet the GUI makes it easy to use. It has a CLI version, and a portable edition. VeraCrypt is the successor of (the now deprecated) TrueCrypt.

    Open Source veracrypt/VeraCrypt
    View VeraCrypt Report
View More...

About the Data: Cryptomator

Change History

  • Amended (androidApp)
  • Amended (iosApp)

API

You can access Cryptomator's data programmatically via our API. Simply make a GET request to: 

https://api.awesome-privacy.xyz/v1/services/cryptomator

The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.

Share Cryptomator

Help your friends compare File Encryption, and pick privacy-respecting software and services.
Share Cryptomator and Awesome Privacy with your network!

← Previous

VeraCrypt
View File Encryption (3)
Next →

age