Cryptomator

cryptomator.org
Cryptomator

Open source client-side encryption for cloud files - Cryptomator is geared towards using alongside cloud-backup solutions, and hence preserves individual file structure, so that they can be uploaded. It too is easy to use, but has fewer technical customizations for how the data is encrypted, compared with VeraCrypt. Cryptomator works on Windows, Linux and Mac - but also has excellent mobile apps.

Open Source

Cryptomator Privacy Policy

Privacy Policy Summary

  • There is a date of the last update of the agreements
  • The service claims to be GDPR compliant for European users
  • This service tracks which web page referred you to it
  • You are not being tracked
  • Third parties are involved in operating the service
  • Your IP address is collected, which can be used to view your approximate location
  • An anonymous payment method is offered
  • The data retention period is kept to the minimum necessary for fulfilling its purposes
  • Your personal data is used for limited purposes

Score

C

Documents

About the Data

This data is kindly provided by tosdr.org. Read full report at: #4403

Cryptomator Source Code

Author

cryptomator

Description

Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.

#cloud-storage#crypto#cryptography#cryptomator#encryption#java#privacy#security

Homepage

https://cryptomator.org

Repository

  • LicenseGPL-3.0
  • Created02 Feb 14
  • Primary languageJava
  • Size36,173 KB
  • Stars16,075
  • Forks1,551
  • Watchers16,075

Language Usage

Language Usage

Project Health

  • Last commit7 days ago
  • Open issues287
  • Latest releasenightly

Recent Commits

Cryptomator Security

6.1/10

Repo Security Summary

Updated 24 Aug 26

  • Code-Review0/10
  • Maintained10/10
  • CII-Best-Practices0/10
  • Security-Policy10/10
  • Dangerous-Workflow10/10
  • PackagingN/A
  • Binary-Artifacts9/10
  • License10/10
  • Token-Permissions0/10
  • Fuzzing0/10
  • Branch-ProtectionN/A
  • Pinned-Dependencies10/10
  • Signed-Releases8/10
  • SAST3/10

Security Advisories (9)

  • mediumPatchedCVSS 4.8

    CVE-2026-33472 Bypass of CVE-2026-32303 fix: `getAuthority()` port-based scheme confusion allows HTTP downgrade of Hub token exchange

  • lowPatched

    GHSA-q8q3-2cf9-cxrpRelease pipelines trust unverified executable downloads

  • mediumPatchedCVSS 4.1

    CVE-2026-32310Unverified masterkeyfile key IDs can access arbitrary local or UNC paths

  • highPatchedCVSS 7.6

    CVE-2026-32303Tampered vault configuration allows MITM attack on Hub API

  • highPatched

    CVE-2026-32309Hub unlocking accepts plaintext HTTP and unvalidated endpoint schemes

  • lowPatchedCVSS 2.2

    CVE-2026-29110Leaking of cleartext paths into log file in non-debug mode

  • lowUnpatchedCVSS 3.3

    GHSA-qwfw-w5qf-7wcjCiphertext file contents of two files can be exchanged

  • mediumPatched

    CVE-2023-39520MSI installer allows Local Elevation of Privileges #2

  • mediumPatched

    CVE-2023-37907MSI installer allows LPE

Cryptomator Website

Website

Cryptomator - Free & Open-Source Cloud Storage Encryption

Cryptomator is an open-source encryption tool for secure cloud storage. Protect your privacy for free on Dropbox, Google Drive, OneDrive, and more.

Redirects

Does not redirect

Security Checks

All 65 security checks passed

Server Details

  • IP Address104.21.5.32
  • LocationSan Francisco,California,United States of America,NA
  • ISPCloudFlare Inc.
  • ASNAS13335

Associated Countries

  • USUS
  • NLNL

Safety Score

Website marked as safe

100%

Blacklist Check

cryptomator.org was found on 0 blacklists

  • AntiSocial Blacklist
  • Artists Against 419
  • Badbitcoin
  • Bambenek Consulting
  • CERT Polska
  • CoinBlockerLists
  • CRDF
  • CryptoScamDB
  • EtherAddressLookup
  • EtherScamDB
  • Fake Website Buster
  • MetaMask EthPhishing
  • NABP Not Recommended Sites
  • OpenPhish
  • PetScams
  • PhishFeed
  • PhishFort
  • Phishing.Database
  • PhishStats
  • PhishTank
  • Phishunt
  • RPiList Not Serious
  • Scam.Directory
  • SecureReload Phishing List
  • Spam404
  • StopGunScams
  • Suspicious Hosting IP
  • ThreatFox
  • ThreatLog
  • TweetFeed
  • URLhaus
  • ViriBack C2 Tracker

Website Preview

Website preview

Cryptomator Android App

APK Info

  • App
  • Creation DateInvalid Date
  • Last UpdatedInvalid Date
  • Current Version

De-Googled Compatibility

Native4.00/ 46 ratings
microG4.00/ 42 ratings
  • GrapheneOSNative4.0 / 4(6)

Tested on Android 14–16 · Updated 15 Jul 26 · View on Plexus →

Trackers

No trackers found

    Permissions

    No permissions required

      Cryptomator iOS App

      App Info

      Cryptomator: Protect Privacy

      With Cryptomator, the key to your data is in your hands. Cryptomator secures and encrypts your sensitive data in your favorite cloud service. So you can rest assured that only you can access your data. EASY-TO-USE Cryptomator is a simple tool for digital self-defense. It allows you to protect your cloud data by yourself and independently. • Simply create a vault and assign a password • No additional account or configuration needed • Unlock vaults with Face ID / Touch ID • Fully integrated into the Files app COMPATIBLE Cryptomator is compatible with the most commonly used cloud storages and available for all major operating systems. • Compatible with iCloud Drive, Dropbox, Google Drive, OneDrive, SharePoint (incl. Microsoft Teams), pCloud, Box, WebDAV- and S3-based cloud storage services • Create vaults in any location via other File Providers (third-party apps must support this) • Access your vaults on all your mobile devices and computers SECURE You don't have to trust Cryptomator blindly, because it is open source software. For you as a user, this means that everyone can see the code: https://github.com/cryptomator/ios • File content and filename encryption with AES and 256 bit key length • Vault password is secured with scrypt for enhanced brute-force resistance • Crypto implementation is publicly documented AWARD-WINNING Cryptomator received the CeBIT Innovation Award 2016 for Usable Security and Privacy. We're proud to provide security and privacy for hundreds of thousands of Cryptomator users. CRYPTOMATOR COMMUNITY Join the Cryptomator Community and participate in the conversations with other Cryptomator users: https://community.cryptomator.org • Follow us on Mastodon @[email protected] • Like us on Facebook /Cryptomator --- Terms of Use: https://www.apple.com/legal/internet-services/itunes/dev/stdeula/

      Rating

      Rated 4.37 out of 5 stars by 411 users

      Version Info

      • Current Version3.1.2
      • Last Updated25 Jun 26
      • First Released21 Dec 21
      • Minimum iOS Version16.0
      • Device Models Supported127

      App Details

      • IPA Size95.44 Mb
      • PriceFree (USD)
      • Age Advisory4+
      • Supported Languages37
      • DeveloperSkymatic GmbH
      • Bundle IDorg.cryptomator.ios

      Screenshots

      • App screenshot
      • App screenshot
      • App screenshot
      • App screenshot
      • App screenshot
      • App screenshot
      • App screenshot

      Cryptomator Reviews

      More File Encryption

      • age is a simple, modern and secure CLI file encryption tool and Go library. It features small explicit keys, no config options, and UNIX-style composability

      • VeraCrypt is open source cross-platform disk encryption software. You can use it to either encrypt a specific file or directory, or an entire disk or partition. VeraCrypt is incredibly feature-rich, with comprehensive encryption options, yet the GUI makes it easy to use. It has a CLI version, and a portable edition. VeraCrypt is the successor of (the now deprecated) TrueCrypt.

      About the Data: Cryptomator

      Change History

      • Amended (androidApp)
      • Amended (iosApp)

      Edit Cryptomator Data

      You can edit Cryptomator's entry in this section of awesome-privacy.yml by submitting a PR to our GitHub repo.
      Note that some of the information shown above has been aggregated from external sources, a list of these can be found data documentation.

      Origin Data

      Modify Data

      API

      You can access Cryptomator's data programmatically via our API. Simply make a GET request to:

      https://api.awesome-privacy.xyz/v1/services/cryptomator

      The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.

      Share Cryptomator

      Help your friends compare File Encryption, and pick privacy-respecting software and services.
      Share Cryptomator and Awesome Privacy with your network!