What it does
Cryptomator creates encrypted file vaults that can be stored in a user's existing cloud-storage folder and accessed through a virtual drive.
Cryptomator sits between local file work and an existing cloud-sync service. Create a vault in the synced location, unlock it and work through the virtual drive rather than editing encrypted storage files directly. Keep the vault's recovery key separately: it can reset a forgotten password and remains valid after a reset. Cryptomator says it cannot reset the password for you. The recovery interface can reconstruct missing configuration files for Vault Format 8 or later, but it does not restore missing encrypted documents. Retain actual file backups as well as the recovery key. Changing a password does not re-encrypt the existing files, which matters if a cloud provider keeps older masterkey versions.
The desktop code is GPLv3 and its encryption features are free. Mobile full access is sold separately for Android and iOS; the free mobile clients are read-only. Hub is a separate team administration service: self-hosted Community has five seats, while larger or managed deployments have other licence terms.
Strengths
- Works with an existing cloud-storage folder
- Virtual-drive access to vault contents
Best for
- People adding their own file encryption before cloud syncing
Sources
- Cryptomator - Free & Open-Source Cloud Storage Encryption (Oct 26, 2026)
- Password and Recovery Key | Cryptomator Documentation (Oct 26, 2026)
- Vault Recovery | Cryptomator Documentation (Oct 26, 2026)
- Cryptomator desktop LICENSE (Oct 26, 2026)
- Cryptomator pricing and platform access (Oct 26, 2026)
- Cryptomator Hub licence (Oct 26, 2026)