Cryptomator

cryptomator.org
Awesome Privacy ➔ Essentials ➔ File Encryption ➔ Cryptomator
Cryptomator

Open source client-side encryption for cloud files - Cryptomator is geared towards using alongside cloud-backup solutions, and hence preserves individual file structure, so that they can be uploaded. It too is easy to use, but has fewer technical customizations for how the data is encrypted, compared with VeraCrypt. Cryptomator works on Windows, Linux and Mac - but also has excellent mobile apps.

Avoid

  • VeraCrypt
  • BitLocker
  • FileVault
  • AxCrypt
  • WinRAR

Also Consider

Open Source

Cryptomator Privacy Policy

Privacy Policy Summary

  • There is a date of the last update of the agreements
  • The service claims to be GDPR compliant for European users
  • This service tracks which web page referred you to it
  • You are not being tracked
  • Third parties are involved in operating the service
  • Your IP address is collected, which can be used to view your approximate location
  • An anonymous payment method is offered
  • The data retention period is kept to the minimum necessary for fulfilling its purposes
  • Your personal data is used for limited purposes

Score

C

Documents

About the Data

This data is kindly provided by tosdr.org. Read full report at: #4403

Cryptomator Source Code

Author

cryptomator

Description

Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.

#cloud-storage#crypto#cryptography#cryptomator#encryption#java#privacy#security

Homepage

https://cryptomator.org

License

GPL-3.0

Created

02 Feb 14

Last Updated

12 Jul 26

Latest version

nightly

Primary Language

Java

Size

35,829 KB

Stars

15,738

Forks

1,476

Watchers

15,738

Language Usage

Language Usage

Star History

Star History

Top Contributors

Recent Commits

  • Andreas Opferkuch (02 Jul 26)

    README: Update JDK version from 25 to 26 (#4269) [ci skip]

  • Tobias Hagemann (01 Jul 26)

    Add ApiVoid as silver sponsor [ci skip]

  • Armin Schrenk (29 Jun 26)

    fix b681c26d727dffe6378a56e8a53b0111d9dd2033 Signed-off-by: Armin Schrenk <[email protected]>

  • Armin Schrenk (29 Jun 26)

    [skip ci] Merge branch 'main' into develop Signed-off-by: Armin Schrenk <[email protected]>

  • Armin Schrenk (29 Jun 26)

    Merge branch 'release/1.19.3'

  • Armin Schrenk (29 Jun 26)

    remove dependency-check from release-check workflow Signed-off-by: Armin Schrenk <[email protected]>

  • Armin Schrenk (29 Jun 26)

    finalize 1.19.3 Signed-off-by: Armin Schrenk <[email protected]>

  • Armin Schrenk (25 Jun 26)

    Replace some slim runners by regular ones Slim ubuntu runners don't have docker, thus failing executing certain actions. (i.e. https://github.com/rtCamp/action-slack-notify/issues/240) Signed-off-by: Armin Schrenk <[email protected]>

  • Armin Schrenk (25 Jun 26)

    [skip ci] Update changelog Signed-off-by: Armin Schrenk <[email protected]>

  • Armin Schrenk (25 Jun 26)

    prepare 1.19.3 Signed-off-by: Armin Schrenk <[email protected]>

  • Armin Schrenk (25 Jun 26)

    replace zulu by temurin (#4263) Closes #4242 Signed-off-by: Armin Schrenk <[email protected]>

  • Armin Schrenk (25 Jun 26)

    Merge pull request #4262 from cryptomator/feature/4260-fix-unsigned-ps1 Sign Powershell scripts (again)

  • Armin Schrenk (25 Jun 26)

    cleanup workflow Signed-off-by: Armin Schrenk <[email protected]>

  • Armin Schrenk (25 Jun 26)

    [skip ci] update changelog Signed-off-by: Armin Schrenk <[email protected]>

  • Armin Schrenk (24 Jun 26)

    for scripts, do not append signature Signed-off-by: Armin Schrenk <[email protected]>

  • Armin Schrenk (24 Jun 26)

    extra sign steps for ps1 Signed-off-by: Armin Schrenk <[email protected]>

  • Armin Schrenk (24 Jun 26)

    check ps1 scripts after signing Signed-off-by: Armin Schrenk <[email protected]>

  • Armin Schrenk (24 Jun 26)

    Revert "Revert #4169 and fix ps1 files not signed" This reverts commit 1879c6fa77cdbc12605715ba70c7e55983e2af5d.

  • Armin Schrenk (24 Jun 26)

    Revert #4169 and fix ps1 files not signed

  • Armin Schrenk (24 Jun 26)

    Ensure also exe build uses JDK 26.0.1+8

  • Armin Schrenk (24 Jun 26)

    Update code-signing action to version 2.0.0

  • Armin Schrenk (24 Jun 26)

    [skip ci] Update changelog

  • Armin Schrenk (24 Jun 26)

    [skip ci] Update changelog

  • Cryptobot (24 Jun 26)

    New Crowdin updates (#4223) New translations strings.properties Afrikaans; Arabic; Bashkir; Belarusian; Bengali; Bosnian; Bulgarian; Catalan; Chinese Simplified; Chinese Traditional; Chinese Traditional, Hong Kong; Croatian; Czech; Danish; Dutch; Filipino; Finnish; French; Galician; German; Greek; Hebrew; Hindi; Hungarian; Indonesian; Italian; Japanese; Korean; Latvian; Lithuanian; Macedonian; Marathi; Norwegian; Norwegian Bokmal; Norwegian Nynorsk; Persian; Polish; Portuguese; Portuguese, Brazilian; Punjabi; Romanian; Russian; Serbian (Cyrillic); Serbian (Latin); Sinhala; Slovak; Slovenian; Spanish; Swahili, Tanzania; Swedish; Tamil; Telugu; Thai; Turkish; Ukrainian; Urdu (Pakistan); Uyghur; Vietnamese; [ci skip]

  • Armin Schrenk (24 Jun 26)

    Merge pull request #4258 from cryptomator/feature/automatic-maven-profile Automatically activate os specific maven profiles

  • Armin Schrenk (24 Jun 26)

    [skip ci] update readme

  • Armin Schrenk (24 Jun 26)

    automatically activate os specific maven profiles

  • Armin Schrenk (24 Jun 26)

    Merge pull request #4255 from cryptomator/feature/javafx25.0.3 Update to openjfx 25.0.3

  • Armin Schrenk (24 Jun 26)

    Merge branch 'develop' into feature/javafx25.0.3

  • dependabot[bot] (23 Jun 26)

    Bump the maven-dependencies group across 1 directory with 16 updates (#4257) Bumps the maven-dependencies group with 16 updates in the / directory: | Package | From | To | | --- | --- | --- | | [org.cryptomator:webdav-nio-adapter](https://github.com/cryptomator/webdav-nio-adapter) | `3.0.1` | `3.0.2` | | [org.cryptomator:integrations-api](https://github.com/cryptomator/integrations-api) | `1.8.0` | `1.9.0` | | org.slf4j:slf4j-api | `2.0.17` | `2.0.18` | | [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) | `1.5.32` | `1.5.35` | | [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.32` | `1.5.35` | | [com.auth0:java-jwt](https://github.com/auth0/java-jwt) | `4.5.1` | `4.5.2` | | [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.21.1` | `2.21.4` | | com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | `2.21.1` | `2.21.4` | | [com.github.ben-manes.caffeine:caffeine](https://github.com/ben-manes/caffeine) | `3.2.3` | `3.2.4` | | [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit-framework) | `6.0.3` | `6.1.0` | | [org.mockito:mockito-core](https://github.com/mockito/mockito) | `5.22.0` | `5.23.0` | | [org.cryptomator:integrations-win](https://github.com/cryptomator/integrations-win) | `1.6.0` | `1.6.1` | | [org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) | `3.10.0` | `3.11.0` | | [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.3` | `3.5.6` | | [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.14` | `0.8.15` | | [org.owasp:dependency-check-maven](https://github.com/dependency-check/DependencyCheck) | `12.2.0` | `12.2.2` | Updates `org.cryptomator:webdav-nio-adapter` from 3.0.1 to 3.0.2 - [Release notes](https://github.com/cryptomator/webdav-nio-adapter/releases) - [Changelog](https://github.com/cryptomator/webdav-nio-adapter/blob/develop/CHANGELOG.md) - [Commits](https://github.com/cryptomator/webdav-nio-adapter/compare/3.0.1...3.0.2) Updates `org.cryptomator:integrations-api` from 1.8.0 to 1.9.0 - [Release notes](https://github.com/cryptomator/integrations-api/releases) - [Changelog](https://github.com/cryptomator/integrations-api/blob/develop/CHANGELOG.md) - [Commits](https://github.com/cryptomator/integrations-api/compare/1.8.0...1.9.0) Updates `org.slf4j:slf4j-api` from 2.0.17 to 2.0.18 Updates `ch.qos.logback:logback-core` from 1.5.32 to 1.5.35 - [Release notes](https://github.com/qos-ch/logback/releases) - [Commits](https://github.com/qos-ch/logback/compare/v_1.5.32...v_1.5.35) Updates `ch.qos.logback:logback-classic` from 1.5.32 to 1.5.35 - [Release notes](https://github.com/qos-ch/logback/releases) - [Commits](https://github.com/qos-ch/logback/compare/v_1.5.32...v_1.5.35) Updates `ch.qos.logback:logback-classic` from 1.5.32 to 1.5.35 - [Release notes](https://github.com/qos-ch/logback/releases) - [Commits](https://github.com/qos-ch/logback/compare/v_1.5.32...v_1.5.35) Updates `com.auth0:java-jwt` from 4.5.1 to 4.5.2 - [Release notes](https://github.com/auth0/java-jwt/releases) - [Changelog](https://github.com/auth0/java-jwt/blob/master/CHANGELOG.md) - [Commits](https://github.com/auth0/java-jwt/compare/4.5.1...4.5.2) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.21.1 to 2.21.4 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.21.1 to 2.21.4 Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.21.1 to 2.21.4 Updates `com.github.ben-manes.caffeine:caffeine` from 3.2.3 to 3.2.4 - [Release notes](https://github.com/ben-manes/caffeine/releases) - [Commits](https://github.com/ben-manes/caffeine/compare/v3.2.3...v3.2.4) Updates `org.junit.jupiter:junit-jupiter` from 6.0.3 to 6.1.0 - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](https://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0) Updates `org.mockito:mockito-core` from 5.22.0 to 5.23.0 - [Release notes](https://github.com/mockito/mockito/releases) - [Commits](https://github.com/mockito/mockito/compare/v5.22.0...v5.23.0) Updates `org.cryptomator:integrations-win` from 1.6.0 to 1.6.1 - [Release notes](https://github.com/cryptomator/integrations-win/releases) - [Changelog](https://github.com/cryptomator/integrations-win/blob/develop/CHANGELOG.md) - [Commits](https://github.com/cryptomator/integrations-win/compare/1.6.0...1.6.1) Updates `org.apache.maven.plugins:maven-dependency-plugin` from 3.10.0 to 3.11.0 - [Release notes](https://github.com/apache/maven-dependency-plugin/releases) - [Commits](https://github.com/apache/maven-dependency-plugin/compare/maven-dependency-plugin-3.10.0...maven-dependency-plugin-3.11.0) Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.3 to 3.5.6 - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.5.3...surefire-3.5.6) Updates `org.jacoco:jacoco-maven-plugin` from 0.8.14 to 0.8.15 - [Release notes](https://github.com/jacoco/jacoco/releases) - [Commits](https://github.com/jacoco/jacoco/compare/v0.8.14...v0.8.15) Updates `org.owasp:dependency-check-maven` from 12.2.0 to 12.2.2 - [Release notes](https://github.com/dependency-check/DependencyCheck/releases) - [Changelog](https://github.com/dependency-check/DependencyCheck/blob/main/CHANGELOG.md) - [Commits](https://github.com/dependency-check/DependencyCheck/compare/v12.2.0...v12.2.2) --- updated-dependencies: - dependency-name: org.cryptomator:webdav-nio-adapter dependency-version: 3.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: org.cryptomator:integrations-api dependency-version: 1.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-dependencies - dependency-name: org.slf4j:slf4j-api dependency-version: 2.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: ch.qos.logback:logback-core dependency-version: 1.5.35 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: ch.qos.logback:logback-classic dependency-version: 1.5.35 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: ch.qos.logback:logback-classic dependency-version: 1.5.35 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: com.auth0:java-jwt dependency-version: 4.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.21.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310 dependency-version: 2.21.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310 dependency-version: 2.21.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: com.github.ben-manes.caffeine:caffeine dependency-version: 3.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: org.junit.jupiter:junit-jupiter dependency-version: 6.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: maven-dependencies - dependency-name: org.mockito:mockito-core dependency-version: 5.23.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: maven-dependencies - dependency-name: org.cryptomator:integrations-win dependency-version: 1.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: org.apache.maven.plugins:maven-dependency-plugin dependency-version: 3.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-dependencies - dependency-name: org.apache.maven.plugins:maven-surefire-plugin dependency-version: 3.5.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: org.jacoco:jacoco-maven-plugin dependency-version: 0.8.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: org.owasp:dependency-check-maven dependency-version: 12.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Cryptomator Security

6/10

Repo Security Summary

Updated 29 Jun 26

  • Code-Review 0/10
  • Security-Policy 10/10
  • Maintained 10/10
  • CII-Best-Practices 0/10
  • Dangerous-Workflow 10/10
  • Packaging N/A
  • Binary-Artifacts 9/10
  • Token-Permissions 0/10
  • Pinned-Dependencies 10/10
  • Fuzzing 0/10
  • License 10/10
  • Branch-Protection N/A
  • Signed-Releases 8/10
  • SAST 2/10

Security Advisories (9)

  • medium Patched CVSS 4.8

    CVE-2026-33472 Bypass of CVE-2026-32303 fix: `getAuthority()` port-based scheme confusion allows HTTP downgrade of Hub token exchange

  • low Patched

    GHSA-q8q3-2cf9-cxrp Release pipelines trust unverified executable downloads

  • medium Patched CVSS 4.1

    CVE-2026-32310 Unverified masterkeyfile key IDs can access arbitrary local or UNC paths

  • high Patched CVSS 7.6

    CVE-2026-32303 Tampered vault configuration allows MITM attack on Hub API

  • high Patched

    CVE-2026-32309 Hub unlocking accepts plaintext HTTP and unvalidated endpoint schemes

  • low Patched CVSS 2.2

    CVE-2026-29110 Leaking of cleartext paths into log file in non-debug mode

  • low Unpatched CVSS 3.3

    GHSA-qwfw-w5qf-7wcj Ciphertext file contents of two files can be exchanged

  • medium Patched

    CVE-2023-39520 MSI installer allows Local Elevation of Privileges #2

  • medium Patched

    CVE-2023-37907 MSI installer allows LPE

Cryptomator Website

Website

Cryptomator - Free & Open-Source Cloud Storage Encryption

Cryptomator is an open-source encryption tool for secure cloud storage. Protect your privacy for free on Dropbox, Google Drive, OneDrive, and more.

Redirects

Does not redirect

Security Checks

All 65 security checks passed

Server Details

  • IP Address 172.67.132.219
  • Location San Francisco, California, United States of America, NA
  • ISP CloudFlare Inc.
  • ASN AS13335

Associated Countries

  • US US
  • NL NL

Safety Score

Website marked as safe

100%

Blacklist Check

cryptomator.org was found on 0 blacklists

  • AntiSocial Blacklist
  • Artists Against 419
  • Badbitcoin
  • Bambenek Consulting
  • CERT Polska
  • CoinBlockerLists
  • CRDF
  • CryptoScamDB
  • EtherAddressLookup
  • EtherScamDB
  • Fake Website Buster
  • MetaMask EthPhishing
  • NABP Not Recommended Sites
  • OpenPhish
  • PetScams
  • PhishFeed
  • PhishFort
  • Phishing.Database
  • PhishStats
  • PhishTank
  • Phishunt
  • RPiList Not Serious
  • Scam.Directory
  • SecureReload Phishing List
  • Spam404
  • StopGunScams
  • Suspicious Hosting IP
  • ThreatFox
  • ThreatLog
  • TweetFeed
  • URLhaus
  • ViriBack C2 Tracker

Website Preview

Website preview
View full report at web-check.xyz

Cryptomator Android App

APK Info

  • App
  • Creation Date Invalid Date
  • Last Updated Invalid Date
  • Current Version

De-Googled Compatibility

Native 4.00 / 4 6 ratings
microG 4.00 / 4 2 ratings
  • GrapheneOS Native 4.0 / 4 (6)

Tested on Android 14–16 · Updated 15 Jul 26 · View on Plexus →

Trackers

No trackers found

Permissions

No permissions required

Cryptomator iOS App

App Info

Cryptomator: Protect Privacy

With Cryptomator, the key to your data is in your hands. Cryptomator secures and encrypts your sensitive data in your favorite cloud service. So you can rest assured that only you can access your data. EASY-TO-USE Cryptomator is a simple tool for digital self-defense. It allows you to protect your cloud data by yourself and independently. • Simply create a vault and assign a password • No additional account or configuration needed • Unlock vaults with Face ID / Touch ID • Fully integrated into the Files app COMPATIBLE Cryptomator is compatible with the most commonly used cloud storages and available for all major operating systems. • Compatible with iCloud Drive, Dropbox, Google Drive, OneDrive, SharePoint (incl. Microsoft Teams), pCloud, Box, WebDAV- and S3-based cloud storage services • Create vaults in any location via other File Providers (third-party apps must support this) • Access your vaults on all your mobile devices and computers SECURE You don't have to trust Cryptomator blindly, because it is open source software. For you as a user, this means that everyone can see the code: https://github.com/cryptomator/ios • File content and filename encryption with AES and 256 bit key length • Vault password is secured with scrypt for enhanced brute-force resistance • Crypto implementation is publicly documented AWARD-WINNING Cryptomator received the CeBIT Innovation Award 2016 for Usable Security and Privacy. We're proud to provide security and privacy for hundreds of thousands of Cryptomator users. CRYPTOMATOR COMMUNITY Join the Cryptomator Community and participate in the conversations with other Cryptomator users: https://community.cryptomator.org • Follow us on Mastodon @[email protected] • Like us on Facebook /Cryptomator --- Terms of Use: https://www.apple.com/legal/internet-services/itunes/dev/stdeula/

Rating

Rated 4.36 out of 5 stars by 397 users

Version Info

  • Current Version 3.1.0
  • Last Updated 27 May 26
  • First Released 21 Dec 21
  • Minimum iOS Version 16.0
  • Device Models Supported 127

App Details

  • IPA Size 94.44 Mb
  • Price Free (USD)
  • Age Advisory 4+
  • Supported Languages 37
  • Developer Skymatic GmbH
  • Bundle ID org.cryptomator.ios

Screenshots

Cryptomator Reviews

More File Encryption

  •
    age

    age

     age-encryption.org

    age is a simple, modern and secure CLI file encryption tool and Go library. It features small explicit keys, no config options, and UNIX-style composability

    Open Source FiloSottile/age
    View age Report
  • VeraCrypt

    VeraCrypt

     veracrypt.fr

    VeraCrypt is open source cross-platform disk encryption software. You can use it to either encrypt a specific file or directory, or an entire disk or partition. VeraCrypt is incredibly feature-rich, with comprehensive encryption options, yet the GUI makes it easy to use. It has a CLI version, and a portable edition. VeraCrypt is the successor of (the now deprecated) TrueCrypt.

    Open Source veracrypt/VeraCrypt
    View VeraCrypt Report
View More...

About the Data: Cryptomator

Change History

  • Amended (androidApp)
  • Amended (iosApp)

API

You can access Cryptomator's data programmatically via our API. Simply make a GET request to: 

https://api.awesome-privacy.xyz/v1/services/cryptomator

The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.

Share Cryptomator

Help your friends compare File Encryption, and pick privacy-respecting software and services.
Share Cryptomator and Awesome Privacy with your network!

← Previous

VeraCrypt
View File Encryption (3)
Next →

age