Cryptomator: Full Version

Review by eFreeware

Cloud storage solves a real problem: your files follow you between devices without you carrying drives around. It also hands a copy of those files to a company whose staff, servers and policies you have no say over. For most photos and documents that trade is fine. For tax records, scans of identity papers or client work, plenty of people would rather the provider held something it cannot read.

Cryptomator Full Version, from German developer Skymatic GmbH, is built for exactly that gap. It creates encrypted vaults on your device, and whatever you put inside them is scrambled before it travels to the cloud service you already pay for or use for free. The app is a one-time purchase at $19.99, with no ads and no in-app purchases, which is a refreshing shape for a privacy tool. It has been on Google Play since October 2017 and currently sits at a 3.6 average from 1,655 ratings, with more than 50,000 installs.

What the vault actually does

The core idea is simple to describe. You make a vault, give it a password, and from then on the contents are encrypted on the device before they are uploaded. Both the contents of files and their names are encrypted, using AES with 256-bit keys, so a folder listing inside your cloud account does not reveal what you called anything. The password itself is run through scrypt, which the developer presents as a way to make brute-force attempts against it more expensive.

That combination matters more than it might sound. Encrypting only file contents leaves a trail of names that can say a great deal on its own. Cryptomator's approach means the cloud provider sees a set of opaque files rather than a labeled archive.

The app also locks vaults automatically when you send it to the background. That is a small design decision with a large effect on how the tool behaves in daily life: you do not have to remember to close anything when you put the phone down, and a vault does not sit unlocked behind whatever you open next.

Where your encrypted files can live

Cryptomator is not a storage service itself, and that is the point. It works alongside Dropbox, Google Drive, OneDrive, and S3- or WebDAV-based storage, so you keep the account, the sharing habits and the sync client you already have. Your vault is just a folder inside that storage as far as the provider is concerned.

Vaults can live in local storage on the device instead of a cloud account. That opens up a second pattern: point a third-party sync app at the folder, and the vault travels wherever that app goes. It also means the same vault can be reached from your other mobile devices and from a computer, since the app is available across the major operating systems. If you work across a laptop and a phone, that continuity is the feature that makes the rest usable.

I would think of it as a layer rather than a destination. You are not moving your files to a new home; you are changing what the place they already live in can see.

Setting up a vault

Getting started is deliberately short. You create a vault, assign it a password, and that is the whole of the setup. No additional account is needed, and there is no configuration to work through before the app does anything useful. For a security tool, that restraint is worth noting: every extra step is a place where people give up and go back to unencrypted folders.

Unlocking is handled with your fingerprint once a vault exists, which keeps the routine side of the app quick without asking you to type a long passphrase every time you want a document.

The most recent update added a welcome screen intended to make those first steps easier to find, along with faster scrolling when you are working through longer files in the editor, refreshed translations, and dependency updates for stability. None of that changes what the app is, but it suggests the developer is still tending the parts people touch most.

Why the open-source angle carries weight

Encryption tools ask for a lot of trust. You are handing your files to software and hoping the math is done properly, the keys are handled sensibly and nothing quietly undermines either. Cryptomator answers that with openness: it is open source software, so the code is available for anyone to examine, and the cryptographic implementation is publicly documented.

Openness does not prove anything by itself, but it changes who can check. For a tool whose entire value rests on doing one difficult thing correctly, that visibility is a meaningful part of the offer.

The project also earned the CeBIT Innovation Award 2016 for Usable Security and Privacy, which speaks to the balance it tries to strike between protection and everyday usability. There is a community around the app as well, with channels on Mastodon and Facebook.

Who gets the most from it

The clearest fit is someone who already stores sensitive material in a mainstream cloud account and does not want to move it. Freelancers keeping contracts and client records, people archiving financial paperwork, or anyone who syncs scans of official documents between a phone and a desktop will find the workflow familiar: same cloud, same sync, different contents underneath.

It also suits users who care about the provenance of their security software. If the idea of an auditable, documented implementation appeals to you more than a polished black box, this is built along those lines. The one-time price fits that audience too.

The 3.6 average across 1,655 ratings suggests a mixed reception rather than universal enthusiasm, and a paid security tool is the sort of app where a rough edge matters more than it would in a game. I would read that score as a reason to look at what recent users are saying before committing, not as a verdict on the encryption itself.

The case for paying once

Cryptomator Full Version costs $19.99 as a single purchase. There are no ads and no in-app purchases, so nothing inside the app is trying to sell you anything, and the price you see is the price you pay. For software that guards documents you may keep for years, that structure is easier to justify than an ongoing charge.

The trade-off is that you are buying a tool, not a service. There is no storage bundled in, so you still need a cloud account or a local folder and a sync app to make the vault useful. And the protection depends on the password you choose, since the app's job is to encrypt what you give it with the key you set.

If your files are already sitting in Dropbox, Google Drive, OneDrive or a WebDAV store and you want the provider to hold ciphertext instead of readable documents, this is a direct way to get there. The app concentrates on encrypting files you already keep in the cloud, so it suits people who want that protection without changing where their files live.

What's new in version 2.0.0

- A new welcome screen makes it easier to get started and find the most important first steps - Fast scrolling in the file editor improves navigation through longer files - Updated translations provide a more polished experience across supported languages - Updated dependencies improve stability and keep the app up to date