Cyberduck, the file transfer protocol client, now offers transparent, client-side encryption for all data stored on servers or in the cloud. The new encryption tool allows users to create secure vaults of data on any server or cloud storage program compatible with Cyberduck.
Users can now create a secure data vault on a physical server or in their cloud storage with a simple menu selection, which is then password protected. Files transferred to the secure vault are automatically encrypted when uploaded and decrypted when downloaded.
All file contents are encrypted using AES, as are directory names, and directory structures are automatically obfuscated. Each file is encrypted individually. The only part of the file that is not encrypted, in fact, is the date the file was created or modified; other than that, all aspects of uploaded files are encrypted and password protected.
The vault passwords themselves are protected against brute force attacks using scrypt.
Uploads and downloads are encrypted transparently, and decrypted automatically when required. Transparent encryption means that users can work with their own encrypted files normally, without additional steps. While the vault containing encrypted data resides in the server or cloud, Cryptomator allows users to access files through a virtual hard drive that works like a USB flash drive.
Because no subscription is required, users need not worry about losing access to their encrypted data. Additionally, since the Cryptomator service is open source, clients can conduct their own independent audits to ensure the security of stored data.
Cyberduck supports all server hardware and most major cloud services, including Amazon S3, Microsoft Azure, or any OpenStack Swift, WebDAV or FTP interoperable hosting solution. The vaults created by users are also compatible with Cyberduck and Cryptomator mobile apps, representing an advancement over previous Cryptomator vaults which could only be used with a local hard disk. Because Cryptomator and Cyberduck are now sharing services, users are no longer required to store local copies of files uploaded to the cloud, as Cyberduck can retrieve stored files on demand.