Cyberduck
Mountain Duck
CLIMountain Duck 5.3 and later runs natively on Windows 11 for ARM.
Windows ARM
Embrace Rounded Corners
Cyberduck 9.5 adopts user interface changes known as Liquid Glass in macOS Tahoe. Besides rounded corners, the update also includes other refinements the list of bookmarks and editing connection details in the bookmark window.
Connect Options
Controls for unavailable connect options depending on the current protocol selection are hidden but the Open Connection window now features the all available options likewise the Edit Bookmark window. Non-frequent options have been moved to a More Options tab. Additionally a Connect button is available when editing a bookmark.
Browser Window
in the main window, the navigation bar is only shown in list and outline view but not when not applicable when displaying bookmarks. Additionally a progress indicator is shown for the bookmark when a connection is being opened.
You can read the full details in the changelog.
Simplify S3 Access with AWS IAM Identity Center
Managing access to Amazon S3 across multiple AWS accounts and users has traditionally required juggling access keys, secret credentials, and complex IAM policies. With support for AWS IAM Identity Center (formerly AWS Single Sign-On) now available in Cyberduck 9.5.0 and Mountain Duck 5.3.0, connecting to S3 has never been easier or more secure.
What is AWS IAM Identity Center?
AWS IAM Identity Center is AWS’s centralized access management solution that lets users sign in once using their existing corporate credentials—whether that’s through Okta, Microsoft Entra ID (formerly Azure AD), or other identity providers. Instead of managing permanent access keys, users get short-lived credentials that automatically expire, significantly improving your security posture.
Why Use IAM Identity Center with S3?
Traditional S3 access requires creating and managing AWS access keys for each user. These long-lived credentials pose security risks if accidentally exposed or shared. IAM Identity Center solves this by:
- Single Sign-On: Users authenticate once with their corporate credentials
- Short-lived credentials: Temporary credentials that automatically expire and rotate. No more permanent access keys to manage or rotate
- Centralized management: Control access across multiple AWS accounts from one place
Getting Started
Setting up IAM Identity Center authentication for S3 requires two main steps:
1. Configure AWS IAM Identity Center
First, enable IAM Identity Center in your AWS account and configure your identity source. You can use AWS’s built-in directory or connect to an external identity provider like Microsoft Entra ID or Okta. Create a permission set that defines what S3 resources users can access—for example, read-only or full access to specific buckets. Add users through IAM Identity Center (or sync them from your external identity provider) and assign them to AWS accounts with the appropriate permission sets. Users will receive an invitation to set up their access to the AWS access portal.
3. Connect in Cyberduck or Mountain Duck
Creating a connection is straightforward:
- Create a new bookmark and select AWS S3 (IAM Identity Center) from the protocol dropdown
- Provide your SSO region and start URL when prompted
- Authenticate through your web browser using your corporate credentials
- Approve access to Cyberduck or Mountain Duck in the AWS portal
- Choose the AWS Account ID shown when your user has access to multiple accounts and the Permission Role Name if more than a single permission set is configured
The browser will redirect back to the application, and you’re connected—no access keys to copy or store.
Streamlined Workflow with AWS CLI Integration
For teams already using the AWS CLI, Cyberduck and Mountain Duck can read configuration directly from your ~/.aws/config file. Simply configure your profile once with aws configure sso, allowing you to skip the manual input.
Get Started
AWS IAM Identity Center support is available now in Cyberduck 9.5 and Mountain Duck 5.3. For detailed setup instructions and configuration options, check out our complete tutorial.
Mountain Duck 5 now available in the Mac App Store
Version 5 is now available in the Mac App Store as a subscription instead of a perpetual license. If you previously purchased Mountain Duck in the Mac App Store, you are eligible to run version 5 with no limitations for up to one year after your purchase date before you are required to purchase a monthly or yearly subscription.
Unfortunately we cannot distribute version 4 any longer in the Mac App Store and it is not possible to support subscriptions through the Volume Purchase Program (VPP) in the Apple Business Manager or Apple School Manager. We advise to use a different solution to distribute software for users and switch to perpetual licensing we offer for Mountain Duck outside the Mac App Store.
New Application Icon for Mountain Duck
The new application icon designed by Katharina Hagemann now comes in three variants for macOS 26 Tahoe including Dark and Mono variants. We have decided to make it squircled to fit into the new icon paradigma. The changes will be available in version 5.1.
New Status Bar Icons
Also the status bar icon in the status bar on macOS and the system tray on Windows as the main user interface to configure Mountain Duck has been revamped to visually fit better and show sync progress with rotating arrows.
Mountain Duck 5
We are thrilled to announce Mountain Duck 5, the premier choice to mount server and cloud storage as a disk in Finder on macOS and the File Explorer on Windows. Version 5 is a solid major upgrade in development for several years with many new features and refinements, including a new Integrated Connect Mode, storage-independent file versioning support, and SMB connections.
New Features
Integrated Connect Mode
Mountain Duck 5 features a new Integrated connect mode using native APIs on Windows & macOS to integrate in the file explorer. No device driver installation or network mount required. The connect mode delivers significantly faster file write performance and file operations that match the speed of local disk operations, and a user experience similar to OneDrive on Windows or iCloud Drive on macOS but with any cloud storage provider of your choice.
Windows Search and Spotlight on macOS can be used to search for files on remote storage in Integrated connect mode.
See also the blog post Integrated Connect Mode for this feature.
SMB Support
As already available in Cyberduck, Mountain Duck 5 expands its protocol support with the addition of SMB (Server Message Block), enabling seamless connectivity to Windows file shares, Linux Samba, macOS File Sharing & Azure File Shares.
See also dedicated blog post SMB Protocol Support for this feature.
Activity Window
Track and cancel currently running sync operations in the new Activity panel available from the status bar (macOS) or tray (Windows) menu. It shows all running operations on files, pending sync tasks as well as any pending mount process.
Custom Versioning
The new Custom Versioning feature allows to safeguard and restore previous file versions. The previous version is stashed away before overwriting a file.
The option is available for all protocols with no support of file versioning such as FTP, SFTP or WebDAV ensuring your files are protected with version history regardless of the underlying storage protocol. File versions can be view and restored in the Info window.
See also the blog post Custom Versioning for this feature.
Pricing
Version 5 is the first paid upgrade after version 4 debuted in June 2020 with 17 free minor updates released since. Users with a license for version 4 receive an upgrade discount between 20% to 100%.
Integrated Connect Mode
The new Integrated connect mode in Mountain Duck 5 synchronizes files and folders from a directory on the local disk with support from macOS and Windows.
While the Online and Smart Synchronization modes use device driver on Windows and NFS on macOS respectively to mount connections, the Integrated mode uses the tightly integrated File Provider (macOS) and Cloud Files (Windows) APIs to sync files from regular folder on the local disk like iCloud or OneDrive does. It allows faster writing and copy processes and access to cached content when offline.
Synchronization
The usage of dedicated operating system features for syncing make Mountain Duck 5 future proof. Like in Smart Synchronization connect mode, files are displayed as placeholders, cached on local disk and optionally selected to always keep offline.
The improved user experience includes familiar file management controls directly within Finder and Windows Explorer, allowing users to easily select files to keep offline, remove cached data, or exclude items from synchronization. Visual indicators provide instant feedback on synchronization status through additional icons displayed next to filenames. Real-time progress is shown during file transfers with progress bars over file icons and circular progress indicators, giving users complete visibility into upload and download operations.
Additional Context Menu Items
Additional context menu items in Windows Explorer and Finder.app on macOS provided by the system allow to download files or free up space for files already cached.
Spotlight
Windows Search and Spotlight on macOS can be used to search for files on remote storage in Integrated connect mode.
New Default
The Integrated connect mode is the default for new connections configured. Existing bookmarks retain the connect mode when an existing cache location is found.
Custom Versioning
With Mountain Duck 5, a new storage-independent versioning option is introduced for protocols with no support for file versioning such as FTP/SFTP, WebDAV, and OpenStack Swift. Safeguard against potential file loss with custom versioning. Stash changes to a file in a versioned folder on the server.
The custom versioning option can be enabled in the bookmark configuration or by default in Preferences → Versions tab.
Use the context menu Info → Versions to retrieve the file history where previous versions can be previewed, deleted or restored. Alternatively manage previous versions stored in the folder named .duckversions adjacent to the file.
More information on the settings can be found in the documentation.
Mountain Duck 5 Public Beta
Get a sneak peek at upcoming Mountain Duck 5. Features new Integrated connect mode using native APIs on Windows & macOS to integrate in the file explorer. No device driver installation or network mount required. The connect mode allows to sync files like OneDrive on Windows or iCloud Drive on macOS using the cloud storage provider of your choice. All major protocols are supported to connect to just about any server you want with SMB added as an additional option in version 5.
The new connect mode benefits from faster file write performance and file operations in general on par with operations on local disk. Local storage is managed by the operating system. The mount is not seen as a remote volume by applications but as a regular folder on disk and can be accessed when offline. You will find familiar user interface in Finder and Windows Explorer to select files to keep offline, remove cached data on disk or exclude from sync. An additional icon provided next to the filename is displayed indicating the synchronization status. Additionally, progress is shown when downloading or uploading a file with a progress bar over the file icon or circular progress indicator adjacent the filename. Windows Search and Spotlight on macOS can be used to search for files.
Choose Preferences → Update → Beta → Check for Update… in the Mountain Duck status bar menu to update. The build can be used with a validation registration key for version 4 while in beta.
Application blocked by Google
This issue has been resolved as of September 11th with the OAuth App Verification completed including the paid CASA assessment.
To access Google Drive or Google Cloud Storage using Cyberduck or Mountain Duck we have registered an OAuth 2.0 Client ID with Google that is required to show users a consent screen to access files from these cloud storage services using the respective APIs.
Google recently blocked the consent screen and now shows the following error when trying to open a new connection:
This app tried to access sensitive info in your Google Account. To keep your account safe, Google blocked this access.
We are aware of the problem and are currently working on getting the consent screen re-approved by Google.
No user data is collected or shared when you access your data in Google Drive or Google Cloud Storage using Cyberduck or Mountain duck. We do not transfer or disclose your information to third parties. Any data accessed is processed solely on your device.
As a workaround you can register your own Custom OAuth 2.0 Client ID for Google Cloud Storage and Google Drive and using with a custom connection profile instead.
