Cryptomator is a free, open-source encryption app for Mac that creates a transparent vault over your cloud-synced folders, locking every file with AES-256 encryption before it ever leaves your machine.
What is Cryptomator?
Cryptomator is a client-side encryption tool that sits between your files and your cloud storage provider — Dropbox, iCloud Drive, Google Drive, OneDrive, or any folder-syncing service — and ensures that only you can read what gets uploaded. It works by mounting an encrypted vault as a virtual drive on your Mac; you drag files in, they encrypt on the fly, and the cloud receives ciphertext it can never decode on its own.
The vault concept is what makes Cryptomator feel so natural. Once unlocked, the virtual drive behaves exactly like any other macOS volume. Finder, Preview, TextEdit, your entire app library — everything writes to it normally. Close the vault and that drive disappears, leaving only scrambled data on disk and in the cloud.
What does Cryptomator do best?
Cryptomator excels at zero-trust cloud storage — turning a service you do not fully control into one where the provider is effectively blind to your data. Every file gets its own individual encryption, so a breach of one file does not cascade across your vault. Filenames are obfuscated too, which is a detail many competing tools miss.
- Transparent virtual drive: No workflow changes — open files the usual way, save them the usual way.
- Per-file encryption: Cloud sync diffs remain small; only changed files re-upload, not the entire vault blob.
- Obfuscated filenames: Your cloud provider cannot infer what you store even from metadata.
- Cross-platform vaults: The same vault unlocks on Windows, Linux, iOS, and Android, so encrypted collaboration across devices is straightforward.
- No account required: There is no Cryptomator server, no subscription login, no telemetry endpoint. The password lives only in your head (or your keychain).
Is Cryptomator free?
The Mac desktop app is free to download and use indefinitely. Cryptomator is open-source, audited, and funded partly through a one-time donation on the Mac App Store version and through the separately priced iOS app. There is no subscription, no feature gating, and no storage cap imposed by the developer — your only limit is the cloud plan you already pay for.
If you want App Store sandboxing and prefer to pay as a thank-you to the team, a paid version is available there. The direct download from the official site is fully featured and free.
Who should use Cryptomator?
Anyone who stores sensitive documents in a commercial cloud service and has thought, even briefly, about who else might have access. Lawyers, accountants, journalists, developers committing private keys or env files to a synced folder, and anyone subject to GDPR or HIPAA constraints will find Cryptomator a practical, low-overhead answer to the "but the cloud company can read this" problem.
It is also the right tool for shared family or team Dropbox folders where some subfolders genuinely need to be private. I use it to keep a vault of financial documents in iCloud Drive — family members share the drive, but only I can open the encrypted folder.
Where Cryptomator is not the best fit: if you want full-disk encryption on the Mac itself, macOS FileVault handles that at the OS level. If you need encrypted collaboration with fine-grained access controls across a team, look at Boxcryptor (now Dropbox-acquired) or Tresorit's enterprise tier. Cryptomator is a personal and small-team tool; it does not have group key management.
How does Cryptomator compare to Boxcryptor?
Boxcryptor was the closest equivalent — a polished, cloud-agnostic encryption layer with team features — until Dropbox acquired and effectively wound it down for new users. That exit validates Cryptomator's open-source model: there is no acquisition that can switch off the software or hold your vaults hostage. VeraCrypt is another comparison point; it creates encrypted containers too, but the containers are fixed-size blobs that sync poorly (a one-byte change re-uploads the entire container). Cryptomator's per-file approach is unambiguously better for cloud storage. For local-only encryption without any cloud angle, VeraCrypt or macOS's built-in encrypted disk images may be simpler.
What are the best Cryptomator alternatives?
The honest shortlist: Tresorit if you want a managed encrypted cloud service with team controls (pricier, proprietary); VeraCrypt if you only need local encrypted containers and do not care about cloud sync efficiency; Picocrypt for one-off file encryption without a vault workflow; or simply relying on macOS FileVault plus trusting your cloud provider's server-side encryption (a weaker threat model, but zero extra setup). For most people syncing personal files to iCloud or Dropbox, Cryptomator hits the sweet spot of trust, convenience, and price.",
Is Cryptomator actively maintained?
Yes — the project is actively developed by Skymatic GmbH, the German company behind it, with regular releases tracked publicly on GitHub. The codebase has received independent security audits, and the community is large enough that macOS-specific issues get fast attention. Apple Silicon is natively supported.
