Skip to content

Krywerk

Encrypted folders as a drive – for individuals and teams, compatible with Cryptomator, with a migration path from Boxcryptor.

Krywerk encrypts folders that can live anywhere – in OneDrive, Google Drive, Dropbox, Nextcloud, on a network drive or a USB stick – and shows them decrypted as a drive. Programs work with the drive like with any other folder; encryption happens in the background.

  • For users

    Install Krywerk, create a personal vault, open team folders.

    User guide

  • For IT administration

    Run the key server for team folders, connect it to Microsoft 365 (Entra ID), back it up.

    Running Krywerk Server

  • Typical scenarios

    Step by step: from the personal vault to emergency access.

    Use cases

  • How it works

    Building blocks, algorithms, trust boundaries and data flows.

    Architecture · Security

What Krywerk can do
Personal vaults Folders with their own password in the open Cryptomator format 8 – also readable with the Cryptomator apps (Android, iOS, Linux …).
Team folders Access via the organization account instead of a shared password; people and groups, shares, recovery key, emergency access under the four-eyes principle, “Renew key” after someone leaves.
Krywerk Server The organization’s own key server with web administration – compatible with Cryptomator Hub, with no limits on people or folders. It never sees files or decrypted keys.
Migration from Boxcryptor Keep opening existing Boxcryptor folders and migrate them step by step to the modern format or to a team folder.
Platforms Windows 10/11, macOS, Linux; context menu in Explorer, Finder or Dolphin/Nautilus.

Krywerk is free software (GNU GPL 3.0, Krywerk Server GNU AGPL 3.0), with no telemetry and no account with the Krywerk project.

Pre-release

Version 0.9 is functionally complete and proven in everyday use on Windows and macOS; Linux support is new. Installation packages are not yet signed, and an external security audit is still pending.