Cryptomator
Free cloud encryption app for Mac that encrypts your files in a vault before they reach cloud storage.
Cryptomator encrypts files before they reach your cloud storage. You create a vault inside a folder your cloud service syncs, protect it with a password, and then work with your files through a virtual drive. The sync client only ever sees encrypted data.
Each vault encrypts both file contents and file names with AES using 256-bit keys, so someone looking at the cloud folder learns little about what is inside. The keys stay with you rather than with the storage provider. Unlock a vault and it appears as a drive you can open, save to and browse like any other. Lock it and the drive goes away.
On macOS, Cryptomator can mount vaults with FUSE-T, which the project recommends on Apple Silicon, or macFUSE, which it recommends on Intel Macs. With neither installed it falls back to WebDAV. Recent releases also tightened checks when unlocking vaults and improved the trust on first use dialog.
All encryption features in the desktop app are free for personal use. An optional supporter certificate funds development and unlocks dark mode. The mobile apps and the Cryptomator Hub team product are paid. The desktop app is made by Skymatic, licensed under GPL-3.0, and needs macOS 11 or later.
Frequently asked questions
Is Cryptomator free?
Yes on the Mac. Every functional and encryption feature of the desktop app is free for personal use. A supporter certificate is an optional purchase that unlocks dark mode and supports the project. The iOS and Android apps need a one-time purchase for write access.
Is Cryptomator safe and open source?
Cryptomator is open source under GPL-3.0, and anyone can review the code on GitHub. Encryption happens on your Mac before files are synced, and your cloud provider never gets the keys. The project publishes security fixes in its release notes.
How do I install Cryptomator?
Download the .dmg from cryptomator.org, open it and drag Cryptomator to Applications, or run brew install --cask cryptomator in Terminal. For the best Finder integration, install FUSE-T on Apple Silicon or macFUSE on Intel. Without either, Cryptomator uses WebDAV.
What macOS version does Cryptomator need?
The download page lists macOS 11 as the minimum for the current version. There are separate builds for Apple Silicon and Intel Macs.
Which cloud services work with Cryptomator?
A vault is a folder of encrypted files, so you place it inside a folder that your cloud service syncs on your Mac. The Cryptomator website keeps a list of compatible services.
Can a team share an encrypted vault?
Yes, with Cryptomator Hub, the paid product for teams. Members unlock shared vaults with their own accounts, access is managed centrally, and Hub can connect to an existing identity system. A free trial is available.
Gallery
No images yet.
Apps like Cryptomator
More apps from Security & Privacy.
KeePassXC
Free password manager for Mac that keeps your logins in an encrypted file you control, with no cloud account.
Security & PrivacyFree
Signal Desktop
Free private messenger for Mac with end-to-end encrypted chats and calls, linked to your phone.
Security & PrivacyFree
Bitwarden
Free password manager for Mac with unlimited passwords, Touch ID unlock and sync on every device.
Security & PrivacyFreemium
