Cloud Storage
Encrypt Your Cloud Files
Cloud storage providers (Dropbox, Google Drive, OneDrive) have access to your files unless you encrypt them first. Even providers who claim “end-to-end encryption” may hold keys.
Solution: Encrypt files locally before uploading.
Cryptomator
Cryptomator — free, open source, client-side encryption for cloud storage.
How It Works
Cryptomator creates an encrypted vault in your cloud folder. Files are encrypted individually before upload. The vault appears as a virtual drive on your computer.
Install
# Ubuntu/Debian
add-apt-repository ppa:sebastian-stenzel/cryptomator
apt update
apt install cryptomator
# AppImage (universal Linux)
wget https://github.com/cryptomator/cryptomator/releases/latest/download/cryptomator-*.AppImage
chmod +x cryptomator-*.AppImage
./cryptomator-*.AppImage
Windows, macOS, iOS, Android: download from cryptomator.org/downloads/
Usage
- Create a new vault inside your Dropbox/Google Drive/OneDrive folder
- Set a strong passphrase (use BitWarden to store it)
- Unlock the vault — it appears as a drive letter/mount point
- Copy files into the virtual drive
- Lock the vault when done
Cloud provider sees only encrypted data. Without your passphrase, files are unreadable.
Boxcryptor
Boxcryptor — similar to Cryptomator, commercial (free tier available).
Works with: Dropbox, Google Drive, OneDrive, Box, and others.
Note: Boxcryptor was acquired by Dropbox in 2022. Some users have moved to Cryptomator as a result.
Self-Hosted Alternatives
If you prefer to control your own cloud:
| Service | Notes |
|---|---|
| Nextcloud | Full-featured self-hosted cloud |
| Syncthing | Peer-to-peer sync, no central server |
| Seafile | Fast, built-in encryption |
Nextcloud with end-to-end encryption enabled gives full control over your data.