Cryptomator for MAC
Free, open-source encryption for your cloud files: lock files in a vault before they sync to iCloud, Dropbox or Google Drive.
Cryptomator Overview
Cryptomator encrypts your files before they go to the cloud. You create a vault inside your iCloud Drive, Dropbox, Google Drive, OneDrive or any other synced folder, and everything you put in it is encrypted on your Mac. The cloud provider only ever sees scrambled files, while on your Mac the unlocked vault appears as a normal drive you can use from any app. Even file and folder names are encrypted. Cryptomator is made by Skymatic in Germany and has been independently audited.
The Cryptomator desktop app is free and open source under the GPL-3.0 license, and the developers say it will stay free forever. The mobile apps and the team product, Cryptomator Hub, are paid. The Mac version needs macOS 11 or later and has separate downloads for Apple Silicon and Intel Macs.
Key Features
Cryptomator keeps your cloud files private without changing how you work.
- Client-side encryption: files are encrypted on your Mac before they upload.
- Works with any cloud: iCloud Drive, Dropbox, Google Drive, OneDrive and any synced folder.
- Virtual drive: an unlocked vault looks like a normal drive in the Finder.
- Encrypted names: file and folder names are hidden too, not just the contents.
- Strong encryption: AES-256 with a key derived from your vault password.
- Recovery key: get back into a vault if you forget its password.
- Open source: the code is public and has been independently audited.
- Cross-platform: open the same vault on Windows, Linux, iPhone and Android.
What’s New in Version 1.19.3
Cryptomator 1.19.3 brings a new dialog and bug fixes.
- A new error dialog when importing a vault fails
- Fixed a warning on the update settings tab when no update check had run
- Fixed several Decrypt Name dialogs opening for the same vault
Cryptomator FAQ
Is Cryptomator free?
Yes. The Cryptomator desktop app for Mac is free and open source under the GPL-3.0 license. The mobile apps and Cryptomator Hub for teams are paid.
How does Cryptomator work?
You create a vault inside a synced cloud folder. Files you put in the vault are encrypted on your Mac, so the cloud only stores encrypted data.
Which cloud services work with Cryptomator?
Any service that syncs a folder to your Mac, such as iCloud Drive, Dropbox, Google Drive and OneDrive.
Which macOS version does Cryptomator need?
Cryptomator needs macOS 11 or later.
Does Cryptomator run on Apple Silicon?
Yes. There are separate downloads for Apple Silicon and Intel Macs.
Are file names encrypted too?
Yes. Cryptomator encrypts file and folder names as well as their contents.
What happens if I forget my vault password?
You can use the vault's recovery key to regain access. Without the password or recovery key, the files cannot be decrypted.
Is Cryptomator safe?
It uses AES-256 encryption, its source code is public, and it has been independently audited.
Can I open my vault on other devices?
Yes. Cryptomator is available for Windows, Linux, iPhone and Android, so you can open the same vault on any of them.
Where does the Cryptomator download on cryptomator.FULLMAC.app come from?
The download button leads to the official Cryptomator download page for macOS at https://cryptomator.org/downloads/mac/. cryptomator.FULLMAC.app does not change or repackage the app.
Similar Apps
CloakerCloaker protects a file with a password in as few steps as possible. Drop a file onto the window, set a password and choose where to save the encrypted copy. To decrypt, drop the encrypted file on the window, enter the password and choose the output location. There is nothing to install on the Mac, because Cloaker comes as a single app bundle. Be careful with your password: if you lose or forget it, your data cannot be recovered, so keep it in a password manager or another secure backup.Security
VeraCryptVeraCrypt is free disk encryption software. It creates an encrypted volume, a file that works like a separate disk once you mount it with your password, and it can also encrypt a whole partition or external drive. Everything you put inside is encrypted automatically, and without the password the data cannot be read. VeraCrypt supports hidden volumes for plausible deniability, several strong encryption algorithms, keyfiles and smart cards, and its volumes can be opened on Windows and Linux too.Security
ClearanceKitClearanceKit is a free, open-source tool that controls which programs on your Mac may touch your sensitive files. It uses Apple's Endpoint Security framework to watch file-system events such as opens, renames, deletions, copies and directory reads, and blocks any process that accesses a protected path without an explicit allow rule. It is aimed at developer machines, where an unsandboxed npm, pip or brew install script runs with your full permissions and could otherwise read folders such as ~/.ssh, cloud credentials or browser cookies.Security
MakLockMakLock is a lightweight menu bar app that protects your macOS applications with Touch ID, Apple Watch proximity or a backup password. When someone tries to open or switch to a protected app, MakLock blocks access with a full-screen blur overlay on all your monitors and asks for authentication. It watches for app switches as well as launches, so returning to an app that is already running also needs unlocking.Security
KnockKnockKnockKnock is a free, open-source Mac security tool that shows what is persistently installed on your computer. Malware usually installs itself so that it runs again each time the Mac restarts, and KnockKnock uncovers software that has done this, whatever its name. Press Start Scan and it goes through the known places where such software can hide, then lists what it found by category, with the number of items in each.Security
ExifCleanerExifCleaner removes hidden metadata from images, media files and PDFs, such as the GPS location, camera details and dates that photos often carry. Drag and drop files or whole folders onto the window and it cleans them in a fast batch, using ExifTool behind the scenes. You can expand any processed file to see exactly what was removed, before and after.Security
FULLMAC.app does not host this app. Download buttons lead to the developer’s own pages.