Cyberduck - Cyberduck

Resist the Squircle Jail

2026-07-08T09:37:00+02:00

With Cyberduck 9.5 with have adopted the user interface for Liquid Glass, but the application icon with the duck objects tinted colours always remaining yellow and escapes the squircle jail imposed by default on application icons on macOS 26. We posted about this on @cyberduck back in September last year.

Post by @cyberduck@fosstodon.org

View on Mastodon

With the recent blog post Free the Icons from Paul Kafasis this has again gained some traction from other developers and we sure hope others join like the fine folks from Cryptomator. The application icon of Mountain Duck concedes we have to admit.

For the technically interested, this is implemented as a simplistic Dock Tile Plugin.

Embrace Rounded Corners

2026-06-18T16:18:00+02:00

Cyberduck 9.5 adopts user interface changes known as Liquid Glass in macOS Tahoe. Besides rounded corners, the update also includes other refinements the list of bookmarks and editing connection details in the bookmark window.

Connect Options

Controls for unavailable connect options depending on the current protocol selection are hidden but the Open Connection window now features the all available options likewise the Edit Bookmark window. Non-frequent options have been moved to a More Options tab. Additionally a Connect button is available when editing a bookmark.

Browser Window

in the main window, the navigation bar is only shown in list and outline view but not when not applicable when displaying bookmarks. Additionally a progress indicator is shown for the bookmark when a connection is being opened.

You can read the full details in the changelog.

Simplify S3 Access with AWS IAM Identity Center

2026-06-18T12:57:00+02:00

Managing access to Amazon S3 across multiple AWS accounts and users has traditionally required juggling access keys, secret credentials, and complex IAM policies. With support for AWS IAM Identity Center (formerly AWS Single Sign-On) now available in Cyberduck 9.5.0 and Mountain Duck 5.3.0, connecting to S3 has never been easier or more secure.

What is AWS IAM Identity Center?

AWS IAM Identity Center is AWS’s centralized access management solution that lets users sign in once using their existing corporate credentials—whether that’s through Okta, Microsoft Entra ID (formerly Azure AD), or other identity providers. Instead of managing permanent access keys, users get short-lived credentials that automatically expire, significantly improving your security posture.

Why Use IAM Identity Center with S3?

Traditional S3 access requires creating and managing AWS access keys for each user. These long-lived credentials pose security risks if accidentally exposed or shared. IAM Identity Center solves this by:

Single Sign-On: Users authenticate once with their corporate credentials
Short-lived credentials: Temporary credentials that automatically expire and rotate. No more permanent access keys to manage or rotate
Centralized management: Control access across multiple AWS accounts from one place

Getting Started

Setting up IAM Identity Center authentication for S3 requires two main steps:

1. Configure AWS IAM Identity Center

First, enable IAM Identity Center in your AWS account and configure your identity source. You can use AWS’s built-in directory or connect to an external identity provider like Microsoft Entra ID or Okta. Create a permission set that defines what S3 resources users can access—for example, read-only or full access to specific buckets. Add users through IAM Identity Center (or sync them from your external identity provider) and assign them to AWS accounts with the appropriate permission sets. Users will receive an invitation to set up their access to the AWS access portal.

3. Connect in Cyberduck or Mountain Duck

Creating a connection is straightforward:

Create a new bookmark and select AWS S3 (IAM Identity Center) from the protocol dropdown
Provide your SSO region and start URL when prompted
Authenticate through your web browser using your corporate credentials
Approve access to Cyberduck or Mountain Duck in the AWS portal
Choose the AWS Account ID shown when your user has access to multiple accounts and the Permission Role Name if more than a single permission set is configured

The browser will redirect back to the application, and you’re connected—no access keys to copy or store.

Streamlined Workflow with AWS CLI Integration

For teams already using the AWS CLI, Cyberduck and Mountain Duck can read configuration directly from your ~/.aws/config file. Simply configure your profile once with aws configure sso, allowing you to skip the manual input.

Get Started

AWS IAM Identity Center support is available now in Cyberduck 9.5 and Mountain Duck 5.3. For detailed setup instructions and configuration options, check out our complete tutorial.

Application blocked by Google

2024-08-18T18:39:00+02:00

This issue has been resolved as of September 11th with the OAuth App Verification completed including the paid CASA assessment.

To access Google Drive or Google Cloud Storage using Cyberduck or Mountain Duck we have registered an OAuth 2.0 Client ID with Google that is required to show users a consent screen to access files from these cloud storage services using the respective APIs.

Google recently blocked the consent screen and now shows the following error when trying to open a new connection:

This app tried to access sensitive info in your Google Account. To keep your account safe, Google blocked this access.

We are aware of the problem and are currently working on getting the consent screen re-approved by Google.

No user data is collected or shared when you access your data in Google Drive or Google Cloud Storage using Cyberduck or Mountain duck. We do not transfer or disclose your information to third parties. Any data accessed is processed solely on your device.

As a workaround you can register your own Custom OAuth 2.0 Client ID for Google Cloud Storage and Google Drive and using with a custom connection profile instead.

Keep previous versions when editing files

2024-06-27T16:16:00+02:00

Cyberduck 9 adds a new custom file versioning feature for protocols with no native versioning support, such as FTP/SFTP and WebDAV.

The feature is added as a security measure to reduce the risk of file loss when editing changes. You can enable the option by default in the Editor tab in Preferences.

The versions can be previewed, deleted or restored in Edit → Info → Versions with the same user interface as when working with revisions from protocols with native versioning support such as a versioned bucket in S3.

Technically instead of overwriting files, previous versions are moved to a folder named .duckversions created adjacent to the edited file. The documentation has more details.

Connect to ownCloud Infinite Scale (oCIS) using OAuth

2024-04-02T09:12:00+02:00

ownCloud Infinite Scale is a user-centric, cloud-native, open source, file sharing and collaboration platform that offers infinite scalability and enables complete digital sovereignty.

ownCloud Infinite Scale uses federated authentication with Keycloak as the identity provider by default. To connect using Cyberduck or Mountain Duck.

We will provide sample steps to connect to ownCloud Infinite Scale (oCIS) using OAuth 2.0/OpenID Connect (OIDC). It requires the client registration in the identity provider in ownCloud and a custom connection profile for Cyberduck & Mountain Duck. To allow to test this without a custom deployment, the sample makes use of the public instance running at ocis.ocis-keycloak.latest.owncloud.works with the identity provider at keycloak.ocis-keycloak.latest.owncloud.works. You can login with the username “admin” and password “admin”. Note that these demo instances are wiped periodically and all data and configuration is temporarily available only.

Import client configuration

You will need to import a client configuration for Keycloak to allow OAuth authentications from Cyberduck & Mountain Duck. The configuration registers a OAuth Client ID with the redirect URIs x-cyberduck-action:oauth and x-mountainduck-action:oauth set to allow a seamless login integration.

Connection Profile

The connection profile defines the custom OAuth Client ID to be used to connect to ownCloud including the authorization and token URLs used for authentication with the Keycloak identity provider. The connection profile matching the above client registration is

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
    <dict>
        <key>Protocol</key>
        <string>owncloud</string>
        <key>Vendor</key>
        <string>owncloud.works</string>
        <key>Description</key>
        <string>ownCloud Infinite Scale</string>
        <key>Default Nickname</key>
        <string>ownCloud Infinite Scale</string>
        <key>Default Hostname</key>
        <string>ocis.ocis-keycloak.latest.owncloud.works</string>
        <key>Default Path</key>
        <string>/remote.php/webdav/</string>
        <key>Path Configurable</key>
        <true/>
        <key>Hostname Configurable</key>
        <true/>
        <key>OAuth Configurable</key>
        <true/>
        <key>OAuth Authorization Url</key>
        <string>https://keycloak.ocis-keycloak.latest.owncloud.works/realms/oCIS/protocol/openid-connect/auth</string>
        <key>OAuth Token Url</key>
        <string>https://keycloak.ocis-keycloak.latest.owncloud.works/realms/oCIS/protocol/openid-connect/token</string>
        <key>Scopes</key>
        <array>
            <string>openid</string>
            <string>email</string>
            <string>offline_access</string>
        </array>
        <key>OAuth Client ID</key>
        <string>3keLfua0olYvW1zKXTDB3OjAMPEYWEQNuiscli395GKJOiPnPURNQWGvGCJZf4Hw</string>
        <key>OAuth Client Secret</key>
        <string>yoqICbLIeYbpZPqDH4D8k4NKb04HqnrWBntEeVZEQ5gO1RmaUlln0Aqu1dj2UoF4</string>
        <key>OAuth Redirect Url</key>
        <string>${oauth.handler.scheme}:oauth</string>
        <key>Password Configurable</key>
        <false/>
        <key>Username Configurable</key>
        <false/>
    </dict>
</plist>

Save the file with the suffix .cyberduckprofile and double click to install and register with Cyberduck & Mountain Duck. This will enable the protocol option ownCloud Infinite Scale in the bookmark configuration.

Connect to S3 with web identity federation

2023-10-18T16:20:00+02:00

The latest versions of Cyberduck & Mountain Duck now allow to connect to S3 by authenticating with an OpenID Connect (OIDC) identity provider.

Connections to S3 with web identity federation use AWS Security Token Service (STS) API to obtain temporary security credentials to authenticate with S3.

With web identity federation, you don’t need to (…) manage your own user identities. Instead, users of your app can sign in using a well-known external OpenID Connect (OIDC)-compatible IdP. They can receive an authentication token, and then exchange that token for temporary security credentials in AWS that map to an IAM role with permissions to use the resources in your AWS account. Using an IdP helps you keep your AWS account secure, because you don’t users to have long-term security credentials.

Default connection profiles for Google and Azure

Default connection profiles are provided to use Google or Azure AD as an identity provider in conjunction with AWS.

These default profiles will prompt users for the Role ARN configured in AWS IAM referencing the trust relationship configured with the identity provider. Assigned by AWS this has a format similar to arn:aws:iam::930717317329:role/my-role-name.

Configuration in AWS IAM

Add an identity provider in IAM. Refer to the documentation from AWS.
Assign a role. The role is crucial as it contains both the trust relationship with the identity provider and permission policy:
The trust policy restricts access to users authenticated with a specific identity provider and allows to filter for specific users in the Condition statement with access to the JSON Web Token (JWT) claims that can be matched.
With the permission policy attached it limits access to a predefined set of buckets or keys.

Refer to the AWS documentation on Creating a role for web identity or OpenID Connect Federation.

The role that your application assumes must trust the identity provider that is associated with the identity token. In other words, the identity provider must be specified in the role’s trust policy. The call to AssumeRoleWithWebIdentity should include the ARN of the role that is specific to the provider through which the user signed in.

Custom Integration

We have made available documentation to write your own connection profile for different combinations of S3/STS and identity provider such as MinIO S3 authenticating with MinIO STS and Keycloak (OIDC).

Documentation

Refer to our S3 documentation.

SMB Protocol Support

2023-10-18T15:14:00+02:00

SMB (Server Message Block) is used to access Windows File Shares or a Samba Linux Server. Cyberduck 8.7.0 adds support to access SMB shares as an light-weight, performant alternative to built-in support in macOS and Windows. Support in Mountain Duck is forthcoming in version 5.

Connecting to SMB

To connect to your SMB (formerly known as CIFS (Common Internet File System) server such as a NAS (Network Attached Storage) using NTLM authentication, select SMB (Server Message Block) in Open Connection or the Bookmark configuration. The default domain name is set to “WORKGROUP” and can be changed to meet the username format requirement depending on the server setup.

SMB Share

You will provided with a list of available shares from the server or alternatively if not supported prompted to input the share name manually. Specify the share name as a Path in the bookmark to avoid connect to a single share.

Up-to-date information about SMB interoperability can be found in out documentation.

Alternative to the official Dropbox client

2023-03-07T13:32:00+01:00

Dropbox recently adopted the File Provider API available on macOS to be used as the exclusive way to synchronize files with their own app. The most prominent change from a user perspective is the limitation to store all synchronized files in ~/Library/CloudStorage as required by the File Provider API. Many users with large data sets preferred to set a custom location on an external disk previously which is no longer an option.

Use Mountain Duck instead of the official Dropbox client

Mountain Duck is a viable alternative to the official Dropbox client. It allows to connect to and synchronize your files in Dropbox without any additional bloat. In Mountain Duck Preferences, you can change your cache location to a different folder or even to an external drive.

Connecting to Dropbox

Mounting your Dropbox in Finder is straight forward using Mountain Duck:

Select Open Connection within the Mountain Duck dropdown menu
A new bookmark window will pop up
Select Dropbox from the protocol section on the top and choose Connect
Your web browser will open leading you through the authentication and authorization flow

Once successfully connected, your files from Dropbox will open in Finder. To connect to a single folder instead of the root, add a path to your bookmark configuration. Without adding a Path to the bookmark configuration, you will be connected to the root of your Dropbox.

Connect to multiple accounts

Connect to and work with multiple Dropbox accounts simultaneously. Repeat the above steps to connect to an additional Dropbox account you may have access. Open a new bookmark and login to the other Dropbox account in your web browser when authorizing access for Mountain Duck.

Use Cyberduck to retrieve files from Dropbox without syncing

Alternatively, use Cyberduck to browse your Dropbox without syncing the files to your computer.

Boxcryptor Alternative

2023-01-03T16:20:00+01:00

Boxcryptor has been acquired by Dropbox and will terminate free accounts as of January 31, 2023. Till then, all users have to look for an alternative. It is not clear how customers with existing contracts are served in the future and no new accounts are accepted. So why not use Mountain Duck with support for the Cryptomator vault format independent from a single provider?

Smart Synchronization

Mountain Duck allows you to mount multiple cloud storages and servers as network drives on macOS and Windows using Smart Synchronization for offline access. Use the built-in, fully interoperable support for Cryptomator vaults to encrypt your sensitive data in password-protected vaults with end-to-end and zero-knowledge encryption. You do not need to have the Cryptomator apps installed but can access the same vault using Cryptomator for iOS for example.

Interoperable

Cryptomator is free and open-source software with no security by obscurity, no hidden backdoors from third parties, no need to trust anyone except yourself. No online services, no subscriptions, no accounts.

Migration

Follow these steps to migrate documents currently in Boxcryptor to a Cryptomator vault accessible through Mountain Duck:

Decrypt all existing files in Boxcryptor by following Off-Migration Guide: Decrypt all Boxcryptor encrypted files.
Download and install Mountain Duck for macOS or Windows.
Create a new connection to any service provider supporting one of the many available protocols including S3, Dropbox, OneDrive & Google Drive or any WebDAV and SFTP compatible storage.
Create a new vault in on your preferred storage.

Documentation

Follow our documentation for step-by-step instructions to create a new vault or access an existing vault stored on your preferred cloud storage (including Dropbox).

macOS Ventura

2022-11-02T18:40:00+01:00

Both Cyberduck and Mountain Duck are fully compatible with macOS Ventura.

View and Retrieve Previous File Versions

2022-06-29T11:42:00+02:00

Cyberduck 8.4 and Mountain Duck 4.12 revamp support to view and retrieve previous versions. Instead of the context menu, previous versions are now listed into the Versions tab of the Info window.

Using the buttons in the lower-left corner, you can perform different actions on the selected version:

Revert to this version
Delete the version permanently
View the version using QuickLook on macOS or open this version in the default editor application on Windows.

The versioning feature is now available for Amazon S3, Backblaze B2, Dropbox, Google Drive, Google Cloud Storage, Microsoft OneDrive, and Microsoft Sharepoint connections. You can find full interoperability information in the documentation available.

Box

2021-12-23T15:49:00+01:00

Cyberduck 8.2 and Mountain Duck 4.10.0 introduce support for accessing Box not only through their FTP or WebDAV gateway but using the native Box API. This should not only improve performance but additionally allow enabling two-factor authentication (2FA) for the account. The new implementation allows to create download and upload shares of files or folders for people who are not Box users by using File → Share…in Cybereduck or Create Download Share or Create Upload Share from the Mountain Duck context menu respectively.

Download Mountain Duck as an alternative to Box Drive.

🏠 Moving to GitHub

2021-11-30T15:06:00+01:00

We previously only had mirror repository for Cyberduck on GitHub and managed pull requests for changes on our own Git server and mirrored all changes to a SVN repository which was used to display a timeline of changes in Trac.

We are now using the repository on GitHub as the primary source root and accept pull requests at the same place. Previous milestone history has been preserved. This will make contributions more straightforward and simplify the development setup for many.

Issues

We now use Github as well to manage all issues containing bug reports or feature requests. We have migrated all previous 11919 tickets opened in Trac since 2005 to GitHub.

Documentation

Additionally we will also retire the current documentation in the Wiki and move it to docs.cyberduck.io. Contributions to the documentation written in Markdown are welcome can be made by opening a pull request.

Embracing Apple silicon

2021-11-25T16:00:00+01:00

The latest versions of Cyberduck and Mountain Duck now run natively on Apple M1 hardware. Thus we are again shipping a universal binary on macOS since dropping support for PPC and Intel 32-bit (i386) in version 4.4 released in October 2013.

This was made possible by the work in Rococoa, JNA and libffi.

Connection Profiles

2021-10-27T10:26:00+02:00

Cyberduck 8 and Mountain Duck 4.8 introduce a new Profiles preferences tab that allows to install additional connection profiles on demand. This makes it much easier to connect to various hosting and cloud storage service providers without the need to lookup connection details other than credentials.

Cyberduck Preferences (Windows)

Usage

You can either scroll through the list of profiles or use the Search function. To install a connection profile simply enable the corresponding checkbox. The profile will be downloaded and saved in the “Profiles” folder of the application support directory right away. Since Mountain Duck and Cyberduck refer to the same application support directory the connection profiles are shared between both applications. Disabling the checkbox deactivates the connection profile for the currently used application.

Providers

Service providers that define connection profiles and open an issue to request the connection profile to be added to the default repository.

macOS Monterey

2021-10-25T15:41:00+02:00

As the latest version of macOS now numbered 12 will arrive later today both Cyberduck and Mountain Duck are fully compatible.

ARM support for Cyberduck CLI

2021-01-18T18:03:00+01:00

Cyberduck CLI is now available for the growing ARM ecosystem. Run the universal file transfer tool on AWS EC2 A1 instance types or Raspberry Pis for example. Both DEB and RPM package types are available in 32bit and 64bit for ARM. The regular installation instructions apply.

Connecting to different Sharepoint libraries

2021-01-12T12:51:00+01:00

Cyberduck 7.8 and Mountain Duck 4.4 improve support for Microsoft Sharepoint connections. The Microsoft SharePoint Site connection profile now allows to connect to specific sites. The regular Microsoft SharePoint connection profile adds support to browse different libraries. Refer to our extended documentation for both OneDrive and SharePoint.

Big Sur

2020-11-10T13:01:00+01:00

We have made some adjustments in version 7.7 of Cyberduck to support the new window appearance introduced in macOS 11. Switching between bookmarks and browser view is now always visible in the toolbar.

The bookmark proxy icon is now displayed inline with the other toolbar controls including the bookmark nickname replacing the previous window title.

Additionally the input field to search for bookmarks or files is now located in the toolbar and treated accordingly.

When horizontal space is limited, the toolbar can display the Search button in place of the search bar. When people click the Search button, the bar expands; when they click elsewhere in the window, the search bar collapses and the toolbar displays the button again.

Restore from Glacier

2020-09-10T16:28:00+02:00

We have made available a feature in Cyberduck 7.6 and later to restore files from Glacier storage class in S3. You can temporarily restore files from Glacier using File → Restore for files with the storage class set to Glacier. The file will be restored using standard retrieval and expire in 2 days after retrieval. Restoring takes some time and attempting to download an item not yet restored will lead to an error *The operation is not valid for the object’s storage class. *

Lock and unlock Cryptomator Vaults

2020-09-10T12:23:00+02:00

The latest version of Cyberuck and Mountain Duck now allow to manually lock and unlock Cryptomator vaults. This is useful as an alternative to the automated discovery of vaults with configurable in Preferences → Cryptomator → Auto detect and open vault in browser.

Cyberduck

Lock and unlock vault stored in S3 in Cyberduck.

Mountain Duck

Lock and unlock vault in Finder in S3 bucket mounted with Mountain Duck. Refer to our documentation.

Cyberduck 7

2019-06-05T08:00:00+02:00

With Cyberduck 7 we introduce the possibility of a multi-segmented download. Multi-Segmented downloads offer the functionality to download one file over several connections. This has the advantage that some files can be downloaded faster and the download process is less error-prone.

In previous versions of Cyberduck, there was only the possibility to run downloads over a single serial connection, the multisegmented download feature multiplies the connections making a parallel download process possible. The following diagram visualizes the two types of download described.

You can expect at least a doubled download speed if you use the multisegment download functionality. Some additional time is required to concatenate the downloaded segments after the download itself is complete. We have collected the following data in download tests with downloads from Amazon S3 and a Minio server running locally.


	AWS EC2¹	Local System²
Regular Download	20 MByte/s	200 Mbyte/s
Segmented Download	40 Mbyte/s	1 GByte/s

¹ AWS EC2: T2.Medium against a regular S3 endpoint

² Local Minio S3 Server feeding data from local NVMe-PCIe-SSD

The described feature can be turned on or off in Preferences → Transfers → General → Downloads.

Refer to the full changelog for many more enhancements and bug fixes.

Mountain Duck 3

2019-04-30T10:46:00+02:00

Work Offline with Smart Synchronization

Version 3 adds a smart synchronization feature to add offline support. Files are synchronized to the local disk when opened to allow offline usage and changes are uploaded in the background as soon as a connection is available. Dropbox like experience with your preferred on-premise enterprise storage or cloud storage. With the additional option to choose which files and folders are available for offline use. Other files are visible but only stored as placeholders. These do not take up disk space on the computer and are downloaded on demand only.

Edit files Offline and upload changes when connectivity to remote server is restored.

Badge Icons

Badge icons in the Finder and Windows Explorer indicate the sync status of files – easily assess if the file is only available when online or is synced to your computer for offline editing. Synchronization with the remote storage is paused and resumed automatically depending on your network connection. The application icon in the system tray animates when a background transfer is currently in progress.

Upgrade

Mountain Duck 3 is a paid upgrade. Existing customers get an upgrade discount between 40% and 100% depending on the date of purchase. Please upgrade your license before updating.

Sharing Large Files

2019-01-30T20:00:00+01:00

You want to grant one or several people temporary access to large files? Email is not an option and providers offering a web interface are costly, limit the file size or tend to be unreliable. Cyberduck or Mountain Duck in combination with cloud storage providers allows you to share files without relying on a third-party website.

Auto Expiring Links

With Cyberduck or Mountain Duck and those cloud storage providers, you can share links with third parties that expire after an hour, days or months. Between the protocols, the expiration time of the shared links may vary. Contrary to other solutions there is no restrictions on bandwidth or the number of downloads.

Supported Providers

In the following section, you will find a short guide on how to share large files with Amazon S3, Microsoft Azure, Dropbox or OpenStack Swift cloud storage providers.

Step by Step

Open Cyberduck or Mountain Duck and connect to your Amazon S3, Microsoft Azure, Dropbox or OpenStack Swift bookmark.
Navigate to or upload the file you want to share
Right-click on the file, choose the option Copy URL in the context menu and click on the Pre-Signed URL (within Dropbox it is named Temporary URL) with the wanted expiration time. In Cyberduck the same option is available in Edit → Copy URL→ Signed URL. Share the link with anyone you want to give access to.

Update See also our documentation on sharing options for different storage service providers.

Accessing OneDrive & Sharepoint

2019-01-16T08:00:00+01:00

The number of different possible options for cloud storage provided by services available from Microsoft Office 365 is confusing and merits some further ado. There are two services available from Microsoft – OneDrive and SharePoint – which are hidden in a diversity of different packages. SharePoint is a cloud storage service which is only integrated in business packages while OneDrive is existing for personal and business usages. Every person who has a Microsoft Account does have access to the personal version of OneDrive. You can detect if you have a personal or business profile by looking at the email address. If you have a business profile the email address contains onmicrosoft.com.

In the following chart an overview of the most common business profile packages and whether the packages contain OneDrive, SharePoint or both is shown.

[TABLE]

Cyberduck and Mountain Duck support OneDrive in personal and business edition as well as SharePoint through the default bundled connection profiles Microsoft OneDrive and Microsoft SharePoint. It doesn’t make any difference if you are using OneDrive personal or business there is only one profile that works for both. To connect to OneDrive or SharePoint with Cyberduck or Mountain Duck you have to create a corresponding bookmark which will connect to the services via Microsoft Graph.

Connecting to OneDrive Personal and Business

Click on “New Bookmark” if you are using Mountain Duck or on the “+” symbol in the browser window if you are using Cyberduck to create a new bookmark.
Choose the profile Microsoft OneDrive.
Type in the Username field your account email address and connect to the bookmark.

A window appears and prompts for an authentication code. Alongside with the authentication code prompt, a web browser window should open with the login page of Microsoft. Log into your account in the web browser window and copy the afterward appearing authentication code into the field in the authentication prompt window.

If you are using Cyberduck a browser window will appear. If you are using Mountain Duck Windows Explorer or Finder are opened revealing your OneDrive.

Connecting to SharePoint

Click on “New Bookmark” if you using Mountain Duck or on the “+” symbol in the browser window if you using Cyberduck to create a new bookmark.
Choose the previously installed profile Microsoft Sharepoint Document Library or the bundled profile Microsoft SharePoint.
Log in with your *.onmicrosoft.com account to login.microsoftonline.com to connect to your SharePoint document library. If you want to connect to SharePoint online you have to use your OneDrive personal account.

More information can be found in the Help Wiki for both OneDrive and Sharepoint.

Encrypt your Dropbox

2018-11-15T21:04:00+01:00

Mountain Duck and Cyberduck allow Cryptomator client-side encryption of your data which is missing in Dropbox and all other popular cloud storage solutions. You will find a description of how to use Cryptomator Vaults in Dropbox and access your documents from your computer and mobile in the following sections.

Encrypt your data with Mountain Duck and Cyberduck

Connect to your bookmark and navigate to the location where you want to store your secured data.
Right-click on white space and choose New Encrypted Vault in the context menu.

As described in the appearing window enter a name for your encrypted folder. Afterward, choose a password and confirm it by retyping it in the last field.

Double-click on your newly created Vault and unlock it by typing the password into the corresponding field.

The Vault opens. Now you can create or copy the documents you want to secure into the Vault to encrypt them.

Access your encrypted data with the Cryptomator app on your mobile.

Install the Cryptomator App on your mobile (IOS, Android).
Tab on the plus symbol and choose the option Add existing vault.
To open the previously created Cryptomator Vault choose the cloud service Dropbox, log into your account and navigate to the Vault.
Open the Vault folder and select the masterkey file which is named masterkey.cryptomator. After that, the app should show automatically the landing page of the Cryptomator app with the previously selected Vault pinned.
Tab on the pinned Vault and type the password into the corresponding field. The Vault should open right after you have unlocked it with the password and you have access to your secured data.

This process does not only work with Dropbox but with any other connection supported in Cyberduck and Mountain Duck. You can find more information on Cryptomator support in our wiki.

Dark Mode

2018-09-21T13:45:00+02:00

Version 6.8 is now available with support for dark mode on macOS Mojave.

Connecting using AssumeRole from AWS Security Token Service (STS)

2018-08-07T11:54:00+02:00

Instead of providing Access Key ID and Secret Access Key, authenticate using temporary credentials from AWS Security Token Service (STS) with optional Multi-Factor Authentication (MFA), making Cyberduck and Mountain Duck more friendly to enterprise deployments. You will need to install the custom connection profile S3 (Credentials from AWS Security Token Service) available from our website.

Our implementation to obtain temporary credentials is interoperable with standard AWS CLI configuration in ~/.aws/credentials. Refer to our wiki for documentation.

Support for Office 365 Deutschland

2018-08-07T11:39:00+02:00

You can now connect to OneDrive in Office 365 Germany in Cyberduck 6.3.0 and Mountain Duck 2.6.0 by installing the Microsoft Office 365 Deutschland OneDrive connection profile from our website.

Enterprise filesharing with DRACOON

2017-11-15T09:46:00+01:00

Cyberduck 6.3 features support for DRACOON – a enterprise cloud service made in Germany.

DRACOON is a highly secure, platform-independent enterprise filesharing solution, which has repeatedly won awards as a market leader. It is certified according to the highest compliance guidelines. Unique to the solution is the own developed TripleCrypt technology with an end-to-end encryption as well as the authorization system for high demands in the enterprise business environment.

The storage service is unique providing transparent, zero-knowledge client-side encryption for an enterprise file sharing environment.

Joyent Triton Object Storage

2017-11-15T09:40:00+01:00

Triton Object Storage (previously named Manta Storage) by Joyent is now supported in Cyberduck 6.3 and Mountain Duck 2.2. Make sure to install the connection profile.

Their storage backend implementation is open source.

All the pieces required to deploy and operate your own Manta are open source

Triton Object storage touts itself as

Proven at production scale, Triton Object Storage delivers replication, clustering, failover, and backup and recovery capabilites. Robust security is built in, including object level security and access, deep role based access control, and client SSH and data encryption.

**Update: **Read more about the Triton Object Storage and Cyberduck on the Joyent Blog.

Google Team Drives

2017-11-14T15:18:00+01:00

We have added support for Google Team Drives in both Cyberduck 6.3 and and Mountain Duck 2.2.

Google Team Drives are shared spaces where teams can easily store, search, and access their files. Unlike files in My Drive, files in Team Drive belong to the team instead of an individual. Even if members leave, the files stay exactly where they are so your team can continue to share information and get work done. Team Drives is available on G Suite Enterprise, G Suite Business, or G Suite for Education editions.

Use the regular Google Drive connection type to see the Team Drives besides My Drive and Shared with me.

Search

2017-07-14T13:52:00+02:00

We have introduced recursive search in version 4.8 which has been improved since to use native protocol features when available for faster results. Hit ⏎ in the browser search input to search recursively for matching filenames in folders. The following protocols have a server side index that is used to give fast results without recursively descending into folders.

We are hiring!

2017-05-09T10:20:00+02:00

Help shaping widely used products in an open source development environment!

We are looking for an experienced Java enthusiast to join our team as an employee or long term freelancer (work from anywhere). You help us to drive the integration of cloud storage services into Cyberduck & build the next major features for Mountain Duck.

Please refer to our job advertisement for more information.

Cyberduck 6.0 ❤️ Cryptomator

2017-05-09T09:50:00+02:00

Free, foolproof client-side encryption for cloud storage for the rest of us. We are thrilled to announce the availability of transparent, client-side encryption support for Cyberduck to secure your data on any server or cloud storage. The new encryption feature is based on the excellent concepts and work of Cryptomator. Encryption for data at rest prevents unauthorized access regardless of the server or cloud storage infrastructure.

Secure and Trustworthy

The Cryptomator security architecture has many crucial advantages over other client-side encryption solutions. Cryptomator encrypts file contents and names using AES. The passphrase for the vault is protected against bruteforcing attempts using scrypt. Directory structures get obfuscated. The software is open source thus can be audited independently for security – you can rest assured there are no backdoors and no hidden vulnerabilities. No online service subscription or account required with the risk of a service shutting down.

Interoperable and ready for use with any cloud storage

All vaults either created by Cyberduck, Cryptomator or their mobile apps for iOS and Android are fully interoperable. Previously, Cryptomator vaults could only be used with files on your local hard disk, thus limited to Dropbox or Google Drive services where data is locally synchronized with their client applications. Now, with Cryptomator support in Cyberduck, you can create secure vaults on any server or cloud storage available through the the broad protocol support in Cyberduck – including Amazon S3, Backblaze B2, Microsoft Azure and OneDrive or any OpenStack Swift, WebDAV or FTP interoperable hosting solution.

Transparent Encryption

Starting to secure your data is as easy as creating a new Cryptomator vault by selecting New Encrypted Vault and providing a passphrase. As soon as you try to open a folder containing a vault, Cyberduck will prompt for the passphrase to unlock it. Inside a unlocked vault you can work as you are used to with Cyberduck. Uploads and downloads are transparently encrypted and decrypted respectively with no change in your usual workflow required. You can have encrypted vaults and non-encrypted folders reside along on your storage location.

Mountain Duck 2.0 with support for Cryptomator vaults is available as beta today.

Illustration by Katharina Hagemann

Local Disk Browser (at last!) + Cryptomator

2017-04-26T11:42:00+02:00

Cyberduck 6 will allow you to open a window to browse your local hard disk. Besides the obvious feature to drag files for download or upload to a remote server from within the application we have finally added a local browser to allow browsing Cryptomator vaults stored on your computer.

**Update: **We have updated our wiki with documentation to access Cryptomator Vaults on your local disk with Mountain Duck or Cyberduck.

/2017/04/Cryptomator-Vault-Local-Disk.m4v

Microsoft OneDrive

2017-04-21T13:06:00+02:00

The next major release of Cyberduck will support connections to Microsoft OneDrive. This includes support for both OneDrive Personal and OneDrive Business. You can give it a try in the current snapshot builds. Like our support for Dropbox, this allows to connect without synchronising files to your local computer.

Chocolatey

2017-04-18T11:48:00+02:00

This post is a reminder, that Cyberduck for Windows has been available in Chocolatey – a package manager for Windows – for some time. Chocolatey, some people want to call it apt-get for Windows, allows to install and upgrade software from the command line. Refer to the Cyberduck for Windows package information or just run choco install cyberduck if you are already familiar.

Mountain Duck 1.7

2017-02-07T13:09:00+01:00

Mountain Duck 1.7 is now available with a focus on fixes for stability and performance improvements by an improved connection management. On Windows, the user interface is completely rewritten based on the Windows Presentation Foundation.

Mountain Duck 2.0 coming this spring will support transparent client-side encryption using Cryptomator interoperable vaults to secure your data on any server or cloud storage mounted.

Cryptomator

2017-01-19T13:01:00+01:00

We are thrilled to announce the availability of transparent, client-side encryption support for Cyberduck to secure your data on any server or cloud storage. The new encryption feature is based on the excellent concepts and work of Cryptomator. Cryptomator also offers apps for iOS and Android to access your encrypted data. All vaults either created by Cyberduck, Cryptomator or their mobile apps are fully interoperable.

Compared to other client-side encryption solutions on the market, the Cryptomator security architecture has many crucial advantages:

Open source software that can be audited independently for security. You can rest assured there are no backdoors and no hidden vulnerabilities.
In addition to file content encryption, file and directory names are encrypted, directory structures are obfuscated.
Other than disk encryption utilities, each file is encrypted for its own.
No online service subscription or account required. You will always have access to your data without the risk of a dependent service shutting down.

Starting to secure your data is as easy as creating a new Cryptomator Vault by selecting New Encrypted Vault and providing a passphrase. As soon as you try to open a folder containing a vault Cyberduck will prompt for the passphrase to unlock it. Inside a unlocked vault you can work as you are used to with Cyberduck. Uploads and downloads are transparently encrypted and decrypted respectively with no change in your usual workflow required. You can have encrypted vaults and non-encrypted folders reside along on your storage location.

Encrypted folder contents

Unlock Vault

Decrypted Folder Contents

You can find our full documentation in the wiki.

A beta version is available for testing. You either download it directly for macOS and Windows or you switch to beta updates in your Cyberduck Preferences. Give it a try and let us know what you like and what you think – curious about your feedback! Support in Mountain Duck will follow later this month that will allow you to open Cryptomator Vaults in Finder and Windows Explorer.

Please note that this is beta software. For now, please use the Cryptomator Vault feature only with data you have a backup available.

Windows App Store

2017-01-18T16:23:00+01:00

Excited to announce Cyberduck 5.3 is now available in the Windows App Store with an easy, straightforward installation and automatic updates on Windows 10.

Interoperability with hubiC

2016-11-03T15:09:00+01:00

Both Cyberduck and Mountain Duck have support for hubiC (OVH), a low priced OpenStack Swift storage service. We have made available a connection profile that uses OAuth 2 for authentication to connect.

Dropbox

2016-10-20T17:17:00+02:00

Open files from any Dropbox account without synchronising everything to your local hard disk. Now supported in Cyberduck and Mountain Duck. Refer to our documentation for more information.

Tabs Everywhere

2016-10-19T20:40:00+02:00

If you have installed macOS Sierra, you can now use tabbed windows in Cyberduck 5.2 or later. You might want to enable tabs by default when choosing File → New Browser by selecting in System Preferences the checkbox Dock → Prefer tabs when opening documents: Always. New browser windows and the transfer window will then be displayed in a single window frame with a tab bar. You can merge windows with View → Show Tab Bar and Window → Merge all Windows.

Refer also to Use tabs with apps on your Mac.

S3 Transfer Acceleration

2016-10-19T20:38:00+02:00

Amazon S3 Transfer Acceleration enables fast, easy, and secure transfers of files over long distances between your client and an S3 bucket. Transfer Acceleration takes advantage of Amazon CloudFront’s globally distributed edge locations. As the data arrives at an edge location, data is routed to Amazon S3 over an optimized network path. In general, the farther away you are from an Amazon S3 region, the higher the speed improvement (up to 300% faster) you can expect from using Amazon S3 Transfer Acceleration.

Cyberduck 5.2 and Mountain Duck 1.6 now uses the accelerate endpoints for file transfers to S3 when enabled for the bucket. Refer to the wiki for more information.

New S3 Regions

2016-10-19T13:26:00+02:00

The latest update for Cyberduck adds support to create buckets in the newly opened AWS regions US East (Ohio), Asia Pacific (Mumbai), and Asia Pacific (Seoul) for Amazon S3.

Update: Version 5.3 adds support for Montreal (ca-central-1) and London (eu-west-2).

Deep Storage

2016-07-20T15:21:00+02:00

Support for Spectra BlackPearl Deep Storage Gateway (Spectra S3) is available with Cyberduck 5, allowing users to move data to tape library storage managed by Spectra S3 interface fast using multiple connections achieving 1000MB/s with a 10GbE network link.

Refer to the wiki for usage instructions.

Spectra Logic Solidifies Hybrid Cloud Offering with Cyberduck Integration

Spectra BlackPearl integration with Cyberduck open source tool enables unlimited choice in public cloud storage and private cloud local storage in one platform

BOULDER, Colo.—July 20, 2016— Spectra Logic, the deep storage experts, today announced the certification of the Cyberduck open source client software tool with its BlackPearl™ Deep Storage Gateway. The Cyberduck universal file and object storage management tool combined with Spectra® BlackPearl enables fast file transfers between primary storage, local tape and disk-based private clouds, or to any public cloud provider.

The integration of Cyberduck as a certified BlackPearl client gives users the power of direct drag-and-drop data moves between BlackPearl objects that reside on Spectra’s ArcticBlue™ disk or tape libraries, and multiple online cloud object stores. Using Spectra’s private cloud ecosystem means that infrequently accessed data can be archived to disk or tape for pennies per gigabyte, reducing the storage and recall fees associated with a pure public cloud strategy, now with a simplified and familiar Cyberduck interface.

Cyberduck integration provides the ability to seamlessly and simply move data between previously disparate storage platforms including local file systems, remote FTP systems, and a host of public cloud storage, including Amazon S3, Amazon Glacier, Google Cloud Storage and Drive, Microsoft Azure, Rackspace Cloudfiles and iRODS. Each system can be loaded in its own Cyberduck window and data moved between any of them.

“Cyberduck provides a wonderful interface to remote files using standard and cloud API protocols,” said beta user, Mike Warfe, Assistant Director, University Technology, [U] Tech, Research Computing and Cyberinfrastructure, Case Western Reserve University. “The integration with the Spectra Logic BlackPearl has enabled our researchers at Case Western Reserve University to have an additional option for storing their data on-premise, instead of the public cloud. This provides value through leveraging our campus bandwidth, and the university’s cyber infrastructure.”

The new Cyberduck BlackPearl integration simplifies data management. BlackPearl uses internal management policies for different storage devices, enabling the system to write data intelligently to different tape libraries, tape partitions, and nearline and online disk. This management feature, called Advanced Bucket Management (ABM), allows BlackPearl to control where and how data is written.

Cyberduck version 5.0 is a standalone application for both PC and MAC platforms and can be downloaded directly from the Cyberduck website or Spectra Logic’s Developer page and is free for Spectra customers.

“End users turn to the cloud to capture a backup copy for disaster recovery, or to create genetic diversity in their backup environment where multiple copies of data are preserved on different mediums in separate locations,” said Matt Starr, Spectra Logic’s CTO. “The Cyberduck integration gives customers the ability to move files quickly to a deep storage platform with a tool they are already familiar with, creating a flexible and powerful cloud strategy.”

Learn more about Spectra Logic’s Cyberduck client integration offering in our joint solution brief and video.

More options for Server Side Encryption in S3

2016-05-23T13:19:00+02:00

Server side encryption (SSE) for stored files is supported and can be enabled by default for all uploads in the S3 preferences or for individual files in the File → Info (⌘-I) → S3. AWS handles key management and key protection for you. Cyberduck previously supported server-side encryption using SSE-S3 where files are encrypted with a default key managed by S3 using AES-256.

Cyberduck 5.0 and later now supports the use of private keys used for servers-side encryption of files uploaded to S3 managed in AWS Key Management Service (KMS). The dropdown list in the *Info *panel allows to choose from all private keys managed in AWS Key Management Service (KMS). This requires the kms:ListKeys and kms:ListKeys permission for the AWS credentials used to connect to S3.

You can give it a try in the latest snapshot build.

Google Drive is back

2016-05-16T12:49:00+02:00

Support for Google Drive is coming back in version 5 of Cyberduck. Access your files stored on Google Drive without synching to your desktop. You can give it a try in the latest snapshot build.

**Update: **Support for Google Drive is now also available in Mountain Duck with version 1.4.