Use cases

Five typical uses. Each one has a step-by-step guide in the documentation.

Protect confidential files in OneDrive

For: Teachers, administration, anyone with sensitive documents

Problem

Grade lists, reports and support plans should be available everywhere – but not readable by the cloud provider.

Solution

Create a personal vault in a OneDrive folder in Krywerk and choose a password.
Save files to the new drive as usual; Krywerk encrypts them before OneDrive uploads them.
Open the same vault on a second computer, or with the Cryptomator app on your phone.

Result

OneDrive only syncs encrypted files with unreadable names. You keep working with Word, Excel and the rest as before.

Read the guide

Krywerk with a mounted personal vault in OneDrive
Download video (MP4)

Team folders without a shared password

For: Departments, subject teams, project teams

Problem

A shared vault with one password for everyone: it gets passed around, never changes, and people who leave keep it.

Solution

Create a team folder and add people or groups from your organization account.
Everyone signs in with their own account (e.g. Microsoft 365) and unlocks their device once.
Managers verify the identity of new members and grant them access.

Result

No more shared password. Access belongs to each person’s account and can be revoked individually.

Read the guide

Manage dialog of a team folder with members and access
Download video (MP4)

Move away from Boxcryptor

For: Everyone who used Boxcryptor

Problem

Boxcryptor has been shut down. The encrypted data is still in the cloud, but the program is gone.

Solution

Select your Boxcryptor key file (.bckey) in Krywerk and unlock it with your existing password.
Open the Boxcryptor folder as a drive and choose “Switch to modern mode”.
New and changed files go to the new format right away; convert the rest in one go or folder by folder.

Result

All data accessible again, and in the end in the open Cryptomator format that detects tampering.

Read the guide

Converting a Boxcryptor drive to the modern format
Download video (MP4)

Set up a key server for your organization

For: IT administrators

Problem

Team folders need a place for their keys – without license limits and without giving a vendor access.

Solution

Start Krywerk Server with Docker Compose on your own server; Caddy provides TLS automatically.
Connect sign-in to Microsoft 365 (Entra ID) through Keycloak and assign roles.
Use the web administration for people, groups, team folders and the audit log; back up daily.

Result

A key server on your own premises, compatible with Cryptomator Hub, that never sees files or decrypted keys.

Read the guide

Overview page of the Krywerk Server web administration
Download video (MP4)

When someone leaves the organization

For: Folder managers, IT administrators

Problem

A colleague moves to another school. She should not be able to read future changes in the team folders.

Solution

Lock the person in the web administration – this takes effect on all devices immediately.
Start “Renew key” for the affected team folders.
If no manager is available, emergency access with two-person approval helps.

Result

New and changed files are no longer readable for the person who left; everyone else keeps working.

Read the guide

Renewing the key of a team folder
Download video (MP4)