8. Glossary

Boxcryptor (legacy) – label for Boxcryptor folders in Krywerk. An older method, only for the transition.

Boxcryptor key file (.bckey) – file exported from Boxcryptor containing your Boxcryptor keys, protected by your Boxcryptor password.

Cache – makes drives faster; only turn it off if there are problems with changes from other devices.

Emergency council / emergency request – people who can jointly (four-eyes principle) give a person management rights to a team folder if all managers become unavailable.

Fingerprint – 64 characters (eight blocks) calculated from a person's public keys. If the person reads it out and it matches what you see, the key really belongs to them.

Grant access – the step in which a manager makes a team folder's key available to new members.

Identity provider – the service where you sign in with your organization account, for example Microsoft 365. Krywerk opens it in your browser.

Identity verified / not verified – whether you (or a person you trust) have compared a person's fingerprint with them. Recommended before granting access.

Key server – manages who may open which team folder (Krywerk Server or Cryptomator Hub). It cannot read the files themselves.

Krywerk Server – key server for team folders that your organization runs itself. Compatible with Cryptomator Hub, without license limits.

Member / manager – roles in a team folder. Members open and edit files; managers can additionally add people, grant access, and take care of emergency access and recovery keys.

Mount / unmount – make a drive available or remove it again. The files are kept either way.

Organization account – your account at your school or organization (e.g. Microsoft 365), which you use to open team folders.

Personal vault – encrypted folder with its own password, in the Cryptomator format.

Recovery key – 28 groups of four characters that can open a team folder without the key server. Should be kept safely by the people responsible.

Renew key – give a team folder a new key, for example after a person has left.

Team folder – encrypted folder for several people, opened through the organization account.

Unlock code (also Account Key) – your personal code for team folders. Krywerk shows it once when you set up your account. You need it to unlock additional computers. Only you have it.

Unlock device – allow a computer for your organization account so that it can open team folders.

Vault password – the password of a personal vault. Cannot be recovered.