Cryptomator

We are thrilled to announce the availability of transparent, client-side encryption support for Cyberduck to secure your data on any server or cloud storage. The new encryption feature is based on the excellent concepts and work of Cryptomator. Cryptomator also offers apps for iOS and Android to access your encrypted data. All vaults either created by Cyberduck, Cryptomator or their mobile apps are fully interoperable.

Compared to other client-side encryption solutions on the market, ​the Cryptomator security architecture has many crucial advantages:

  • Open source software that can be audited independently for security. You can rest assured there are no backdoors and no hidden vulnerabilities.
  • In addition to file content encryption, file and directory names are encrypted, directory structures are obfuscated.
  • Other than disk encryption utilities, each file is encrypted for its own.
  • No online service subscription or account required. You will always have access to your data without the risk of a dependent service shutting down.

Starting to secure your data is as easy as creating a new Cryptomator Vault by selecting New Encrypted Vault and providing a passphrase. As soon as you try to open a folder containing a vault Cyberduck will prompt for the passphrase to unlock it. Inside a unlocked vault you can work as you are used to with Cyberduck. Uploads and downloads are transparently encrypted and decrypted respectively with no change in your usual workflow required. You can have encrypted vaults and non-encrypted folders reside along on your storage location.

Encrypted folder contents

Encrypted folder contents

Unlock Vault

Unlock Vault

Decrypted Folder Contents

Decrypted Folder Contents

 

You can find our full documentation in the wiki.

A  beta version is available for testing. You either download it directly for macOS and Windows or you switch to beta updates in your Cyberduck Preferences. Give it a try and let us know what you like and what you think – curious about your feedback! Support in Mountain Duck will follow later this month that will allow you to open Cryptomator Vaults in Finder and Windows Explorer.

Please note that this is beta software. For now, please use the Cryptomator Vault feature only with data you have a backup available.

Tabs Everywhere

If you have installed macOS Sierra, you can now use tabbed windows in Cyberduck 5.2 or later. You might want to enable tabs by default when choosing File → New Browser by selecting in System Preferences the checkbox Dock → Prefer tabs when opening documents: Always. New browser windows and the transfer window will then be displayed in a single window frame with a tab bar. You can merge windows with View → Show Tab Bar and Window → Merge all Windows.

cyberduck-tab-browsercyberduck-tab-transfers

Refer also to Use tabs with apps on your Mac.

S3 Transfer Acceleration

Amazon S3 Transfer Acceleration enables fast, easy, and secure transfers of files over long distances between your client and an S3 bucket. Transfer Acceleration takes advantage of Amazon CloudFront’s globally distributed edge locations. As the data arrives at an edge location, data is routed to Amazon S3 over an optimized network path. In general, the farther away you are from an Amazon S3 region, the higher the speed improvement (up to 300% faster) you can expect from using Amazon S3 Transfer Acceleration.

Cyberduck 5.2 and Mountain Duck 1.6 now uses the accelerate endpoints for file transfers to S3 when enabled for the bucket. Refer to the wiki for more information.

s3-transfer-acceleration

Read-only

Mountain Duck gained the ability to mount remote volumes as read-only and forbids writes to the remote server on the operating system level. This will pose most useful to users mounting productive environments and will want to make sure nothing is written to the server but files are only readable.

 

Read Only Mount Option