Windows · Privacy & Encryption
Cryptomator for Windows
Free, open-source client-side encryption tool that creates encrypted vaults inside your existing cloud-storage folders, so providers like Dropbox never see your unencrypted files.
Updated August 9, 2026 · Reviewed by SoftNexi Editorial Team, Software research and documentation
Overview
Cryptomator is designed specifically around the cloud-storage use case: rather than encrypting a whole drive like VeraCrypt, it creates an encrypted vault as a folder that lives inside Dropbox, Google Drive, OneDrive, or any other synced folder. It mounts as a virtual drive on your system, so you work with normal, unencrypted files while the vault folder itself contains only encrypted, unreadable data as far as the cloud provider is concerned.
This makes it a natural fit for anyone who wants client-side encryption on top of a cloud service they don't want to fully trust with plaintext file access, without switching cloud providers or losing sync functionality. It differs from VeraCrypt in scope: VeraCrypt is best for whole-disk or large container encryption on local/portable drives, while Cryptomator is purpose-built for cloud-sync folders and file-by-file encrypted structure that syncs efficiently (changing one file only re-uploads that file's encrypted blocks, not an entire monolithic container).
The desktop apps are free and open source; Cryptomator's mobile apps (iOS/Android) are paid, which is the company's primary monetization model, while desktop use remains fully free. This means Windows and Mac users get full functionality without payment, and the developer earns revenue from mobile users who want vault access on phones and tablets.
It suits anyone using a mainstream cloud-sync service who wants that specific provider to never see unencrypted file contents, and who wants efficient per-file sync rather than one large encrypted container that re-uploads entirely on any change.
Key features
- Client-side encryption of a vault folder placed inside any cloud-sync folder
- Mounts vaults as a virtual drive for transparent, normal file access
- Per-file encrypted structure so cloud sync only re-uploads changed files
- Free and open source for desktop; independently security-audited
- Cloud-provider-agnostic — works with Dropbox, Google Drive, OneDrive, and others
- Cross-platform vault compatibility between Windows, Mac, and mobile apps
System requirements
- Operating system
- Windows 11 and Windows 10 (64-bit)
- Virtual drive support
- Uses a virtual drive to mount vaults; requires the driver component installed with Cryptomator
- Cloud sync (optional)
- Works alongside any cloud-sync client already installed, such as Dropbox or OneDrive
How to install Cryptomator
1. Download from cryptomator.org
Use the official downloads page rather than a third-party mirror.
2. Install and create a vault
Choose a location inside your existing cloud-sync folder for the new vault.
3. Set a strong vault password
There is no recovery option if this password is lost, so store it in a password manager.
4. Mount and use the vault
Unlock the vault to mount it as a virtual drive, then move files into it as you would any folder.
How to use it
1. Unlock the vault before working
Enter your vault password each session to mount it as a drive letter.
2. Work with files normally
Once mounted, save and edit files as usual — encryption happens transparently.
3. Lock the vault when finished
Unmount it to ensure files aren't left accessible in decrypted form.
Safety and privacy
- Download only from cryptomator.org; verify checksums if offered, since encryption tools are attractive targets for tampered installers.
- Losing your vault password means the encrypted data cannot be recovered — there is no backdoor by design.
- Bundled software
- No third-party bundling in the official installer.
- Privacy
- Cryptomator's stated design goal is that your cloud provider never sees unencrypted file contents; the company has published independent security audits, available on their site, and the client is open source for review.
Known risks
- Forgetting your vault password results in permanent data loss with no recovery mechanism.
- The virtual-drive component can occasionally conflict with other virtual-drive software; check compatibility notes if you use similar tools.
What's new
Current release
Cryptomator updates through its own auto-updater and desktop releases. Check cryptomator.org's release notes for version-specific detail and any published audit updates.
Pros and cons
Pros
- Free and open source for desktop use
- Purpose-built for cloud-sync folders, unlike whole-disk tools
- Efficient per-file sync instead of one large container
- Published independent security audits
Cons
- Mobile apps require payment
- Virtual-drive component can occasionally conflict with similar software
- No password recovery if forgotten, by design
- Narrower scope than full-disk encryption tools like VeraCrypt
Verdict
Cryptomator is the right tool specifically for encrypting files inside a cloud-sync folder without giving up efficient per-file syncing. For whole-disk or portable-drive encryption instead, VeraCrypt is the better-suited tool.
Frequently asked questions
Does Cryptomator support Windows 11?
Yes. Cryptomator's desktop app supports current 64-bit releases of Windows 11 and Windows 10, using a virtual-drive driver component installed alongside it.
Where should I download Cryptomator?
Download it only from cryptomator.org/downloads and verify checksums if offered, since encryption tools are attractive targets for tampered installers.
Is Cryptomator free?
The Windows and Mac desktop apps are free and open source; the company monetizes through paid iOS and Android mobile apps instead.
Does Cryptomator see my files?
Cryptomator's stated design goal is that your cloud provider never sees unencrypted file contents; it is open source and has published independent security audits for review.
What doesn't Cryptomator protect against?
It only encrypts the vault folder you create — it is not whole-disk encryption like VeraCrypt, and forgetting your vault password results in permanent data loss with no recovery mechanism.