FAQ

General

How much does Krywerk cost? Nothing. Krywerk is free software (GNU GPL 3.0, server GNU AGPL 3.0). There are no license limits on people, devices or team folders.

Does Krywerk need an account with the Krywerk project, or does it send data to Krywerk? No. Personal vaults work entirely without a server. For team folders, your organization runs its own key server. Krywerk sends no telemetry and does not check for updates.

Where are my files stored? Wherever you created the folder – e.g. in OneDrive. Krywerk only stores encrypted files there and shows them decrypted as a drive. The cloud provider sees encrypted contents and names.

What can the cloud provider still see? The number, approximate size and timestamps of the files, and the folder depth. Not names or contents.

Cryptomator and Boxcryptor

Is Krywerk compatible with Cryptomator? Personal vaults and team folders use the open Cryptomator format 8. The Cryptomator apps can open them, and Krywerk opens vaults created by the Cryptomator apps. Krywerk Server speaks the Cryptomator Hub protocol; conversely, Krywerk also works with an existing Cryptomator Hub. Krywerk is an independent project and not a product of the makers of Cryptomator.

Can I still open my Boxcryptor data after the shutdown? Yes, with your key file (.bckey) and your Boxcryptor password. Krywerk shows Boxcryptor folders as a drive and migrates them step by step to the modern format: Migrating from Boxcryptor.

Why should I migrate if Boxcryptor folders keep working? The Boxcryptor format does not protect contents against deliberate tampering and uses older algorithms. The modern format detects any tampering (Security).

Team folders

Does everyone on the team need the same password? No. Each person signs in with their organization account (e.g. Microsoft 365). They receive the key encrypted for themselves; managers grant access.

Can IT administration read my team folders? Not through the server alone: it only stores keys encrypted for the individual people. Only those to whom a manager has granted access in the app get access. With “Verify identity” you make sure the key really belongs to the intended person (Security).

What happens when someone leaves the organization? Lock the person in the web administration and “renew key” for the affected team folders – after that, new and changed files are no longer readable for them: Migration and key renewal.

What if the key server goes down? Drives that are already open keep working. Opening them again only works once the server is reachable – or without the server, using the recovery key (Backup).

Do team folders work on a phone? The Cryptomator apps for Android and iOS can open team folders via a hub. This has not yet been fully tested with Krywerk Server.

Privacy

Is Krywerk GDPR compliant? That is for the organization using it to decide. Krywerk provides a description of all data flows and stored data for this purpose: Privacy and data flows. The key server runs on your premises and does not store IP addresses by default.