Bern, May 09, 2017
We are thrilled to announce the availability of transparent, client-side encryption support for Cyberduck to secure your data on any server or cloud storage. The new encryption feature is based on the excellent concepts and work of Cryptomator. Encryption for data at rest prevents unauthorized access regardless of the server or cloud storage infrastructure.
The Cryptomator security architecture has many crucial advantages over other client-side encryption solutions. Cryptomator encrypts file contents and names using AES. The passphrase for the vault is protected against bruteforcing attempts using scrypt. Directory structures get obfuscated. The software is open source thus can be audited independently for security – you can rest assured there are no backdoors and no hidden vulnerabilities. No online service subscription or account required with the risk of a service shutting down.
All vaults either created by Cyberduck, Cryptomator or their mobile apps for iOS and Android are fully interoperable. Previously, Cryptomator vaults could only be used with files on your local hard disk, thus limited to Dropbox or Google Drive services where data is locally synchronized with their client applications. Now, with Cryptomator support in Cyberduck, you can create secure vaults on any server or cloud storage available through the the broad protocol support in Cyberduck – including Amazon S3, Backblaze B2, Microsoft Azure and OneDrive or any OpenStack Swift, WebDAV or FTP interoperable hosting solution.
Starting to secure your data is as easy as creating a new Cryptomator vault by selecting "New Encrypted Vault" and providing a passphrase. As soon as you try to open a folder containing a vault, Cyberduck will prompt for the passphrase to unlock it. Inside a unlocked vault you can work as you are used to with Cyberduck. Uploads and downloads are transparently encrypted and decrypted respectively with no change in your usual workflow required. You can have encrypted vaults and non-encrypted folders reside along on your storage location.
Based on the solid open source foundation of Cyberduck, Mountain Duck lets you mount server and cloud storage as a local disk in the Finder.app on Mac and the File Explorer on Windows. Mountain Duck 2.0 with support for Cryptomator vaults is available as beta today.
Cryptomator is a client-side cloud storage encryption software by the German startup Skymatic. The software encrypts files automatically on a user’s device before they are uploaded to a cloud storage. As Cryptomator is open-source, it solves the issue of trust that many institutions used to have when considering the use of cloud storage solutions. For the combination of transparency and usability, Cryptomator was awarded the CeBIT Innovation Award for Usable Security and Privacy in 2016. The software is available for all major operating systems (Win, Mac, Linux) and on mobile devices (iOS, Android).
Cyberduck is a highly popular, libre FTP, SFTP, WebDAV, Amazon S3, Backblaze B2, Microsoft Azure & OneDrive and OpenStack Swift browser for Mac and Windows.