Flatsonar

Cryptomator

by Skymatic GmbH

Encryption for your cloud made easy

Dangerous permissions Verified creator GPL-3.0-or-later v1.19.3
Install Source code

Support the creators

Flatsonar is just the shop window. The people below made Cryptomator.

Donate
Screenshot 1 of Cryptomator Screenshot 2 of Cryptomator Screenshot 3 of Cryptomator

About

Cryptomator provides easy-to-use, transparent, client-side encryption for your cloud. It protects your documents from unauthorized access and prying eyes, while you will still be able to view and edit your documents locally. By not requiring any registration or account and performing all encryption locally, it gives you back control over your data and ensures your privacy. Cryptomator is offered for all major platforms (including Android and iOS).

Cryptomator encrypts file contents and names using the widespread industry standard AES. Your passphrase is protected against brute forcing attempts using scrypt. Additionally, directory structures get obfuscated. For more info about the Cryptomator encryption scheme, check out the online documentation.

Cryptomator is a free and open-source software licensed under the GPLv3. This allows anyone to check our code. Thus, it is impossible to introduce backdoors for third parties or to hide vulnerabilities, so you do not need to trust Cryptomator. Also, vendor lock-ins are impossible. Even if we decided to stop development: The source code is already cloned by hundreds of other developers and development can be picked up by others.

Permissions

6 permissions weaken the sandbox. Flatsonar asks before installing.

  • all devices (/dev): webcams, disks, raw hardware
    --device=all
  • sandbox escape: can run commands on the host via flatpak-spawn
    --talk-name=org.freedesktop.Flatpak
  • X11 display: X11 lets apps read input and windows of other apps
    --socket=x11
  • full access to your home folder
    --filesystem=home
  • access to operating-system files
    --filesystem=host-etc:ro
  • your keyring / saved passwords
    --talk-name=org.freedesktop.secrets
  • inter-process communication (needed for X11)
    --share=ipc
  • network
    --share=network
  • access to xdg-run/org.keepassxc.KeePassXC.BrowserServer
    --filesystem=xdg-run/org.keepassxc.KeePassXC.BrowserServer
  • access to xdg-run/app/org.keepassxc.KeePassXC
    --filesystem=xdg-run/app/org.keepassxc.KeePassXC
  • notifications
    --talk-name=org.freedesktop.Notifications
  • talks to org.ayatana
    --talk-name=org.ayatana
  • talks to org.kde.kwalletd5
    --talk-name=org.kde.kwalletd5
  • talks to org.freedesktop.FileManager1
    --talk-name=org.freedesktop.FileManager1
  • talks to org.gnome.keyring
    --talk-name=org.gnome.keyring
  • system tray
    --talk-name=org.kde.StatusNotifierWatcher
  • talks to org.gtk.vfs.*
    --talk-name=org.gtk.vfs.*
  • talks to org.kde.kwalletd6
    --talk-name=org.kde.kwalletd6

Who publishes this

The creator demonstrably controls this app id: Flathub verification, the hosting account owns the namespace, or a well-known file on their domain.

  • verified on Flathub: the developer proved they control this app id
    publisher:flathub

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.