Cryptomator — The Complete Guide: Encrypting Files Before They Reach the Cloud

Cryptomator encrypts files on your computer before they reach the cloud. It creates an encrypted vault inside a Dropbox, OneDrive or Google Drive folder and shows it as a normal drive. Every file saved there, including its name, is encrypted with AES-256 before syncing — and the cloud provider sees only encrypted data.

Cryptomator

Skymatic

Client-side encryption before files reach the cloud — encrypted vaults inside Dropbox, OneDrive or Google Drive.

Get it from the vendor

What you get

Client-side encryption — content is encrypted before it leaves the computer.
File-name encryption — even file names are hidden from the provider.
Virtual drive — work with the files as usual, from any program.
Works with common clouds — Dropbox, OneDrive, Google Drive and similar.
Open source — the desktop app is GPL-3.0, for Windows, macOS and Linux.

For an engineering office

Drawings, contracts and sensitive client data can sit in a public cloud without being exposed to the provider. One critical point: if both the password and the recovery key are lost, the vault cannot be opened — keep them in a password manager. The desktop app is free for any use; the iOS and Android apps are paid, and Cryptomator Hub for teams is a paid subscription.

Related tools

To encrypt a whole drive or laptop — VeraCrypt. To store the password and recovery key — KeePassXC. To sync and transfer to cloud storage from the command line — rclone.