Cryptomator1.19.6

Cryptomator encrypts files locally before they are synchronized to cloud storage, placing them in a vault that you open through a virtual drive. Files appear and behave like ordinary drive contents, while the encryption process keeps control of the data on your Linux computer rather than handing plaintext to an online service.

Each vault uses AES encryption with a 256-bit key, encrypts file names, and obscures the folder structure. You can create as many separately password-protected vaults as you need, including multiple vaults within Dropbox. Authenticated encryption detects altered ciphertext before decryption, and file operations are transactional and atomic when the underlying filesystem supports those properties.

The program works with Dropbox, Google Drive, OneDrive, MEGA, pCloud, ownCloud, Nextcloud, and other services that synchronize a local directory, making it useful for protecting synchronized documents, backups, and personal files. Cryptographically secure random values protect salts, initialization vectors, and the master key; sensitive values are cleared from memory promptly, while each file carries its own decryption information apart from the key.

Version 1.19.6 adds a dedicated error dialog when importing a vault fails and changes Debian package distribution from GitHub to the Launchpad beta or stable repositories. Native binaries include the unlimited-strength policy for 256-bit keys, while building Cryptomator from source requires JDK 26, such as Temurin or Zulu, together with Maven.