B
Boxcryptor Blog
boxcryptor.com · Company blog · on HN since 2011
The company blog of Boxcryptor, a client-side encryption tool for cloud storage, covering its audits, Dropbox acquisition and ransomware.
What HN saysHN commenters recommend Boxcryptor as a way to encrypt files stored on Dropbox, and link its blog for the Dropbox acquisition news.
40HN people shared it
26linked it in comments
21stories submitted
62story points
4 years agolast shared
2011people per year2026
Most-shared posts
- 1BoxCryptor: Easy On-the-fly Dropbox Encryption16 people · 8 points · first shared 2011 · 1 comments on HN
- 2Dropbox Acquires Boxcryptor’s Assets, to provide client-side encryption6 people · 15 points · first shared 2022 · 3 comments on HN
- 3Boxcryptor – Encryption for cloud storage without container files6 people · 2 points · first shared 2014 · 2 comments on HN
- 4Classic2 people · first shared 2014
- 5Boxcryptor classic2 people · first shared 2013
- 6Iphone backup icloud encryption2 people · first shared 2020
- 7Independent Audit: Insights into the Source Code of Boxcryptor1 people · 15 points · first shared 2021 · 6 comments on HN
- 8A Close Look at Ransomware at the Example of Vipasana – Part II1 people · 5 points · first shared 2016 · discussion on HN
- 9Building an App with WebCrypto in 2016 – Dos and Don’ts from the Front1 people · 4 points · first shared 2016 · discussion on HN
- 10Time to drop TrueCrypt (at least for Dropbox)1 people · 2 points · first shared 2014 · discussion on HN
- 11Introducing the Boxcryptor for Android Encryption Interface1 people · 2 points · first shared 2014 · discussion on HN
- 12Boxcryptor Sold to Dropbox1 people · 2 points · first shared 2022 · 1 comments on HN
- 13We Built the Boxcryptor for Microsoft Teams Integration1 people · 2 points · first shared 2020 · discussion on HN
- 14A Close Look at Ransomware by the Example of Vipasana (Part I)1 people · 2 points · first shared 2016 · discussion on HN
- 15New Boxcryptor for iOS app encrypts iCloud1 people · 1 points · first shared 2015 · discussion on HN
What HN people wrote when they linked it
jpalomaki · 2013-06-10
BoxCryptor[1] has been my choice. I've been now using it on daily basis together with Dropbox and I'm satisfied. Boxcryptor works on the client side and stores the encrypted files on Dropbox folder as ordinary files. It is also possible to encrypt filenames. Boxcryptor comes from Germany.
The only drawback I have encountered is that Dropbox limits the path names to 255 characters. With encrypted file/folder names this can become an issue especially with some Java projects.
I think this really gives me the best of both worlds. Security for the files I think need it and the Dropbox infrastructure for syncing files.
[1] https://www.boxcryptor.com/
MartinMond · 2012-07-19
I've been using encfs for a long time now and I never had any issues, neither on Lion nor on Mountain Lion (developer previews)
I can really recommend http://boxcryptor.com/
boxy_brown · 2012-04-24
BoxCryptor: http://www.boxcryptor.com/
Provides a pain-free encrypted layer on top of free cloud storage services like DropBox. BoxCryptor encrypts individual files, then stores the encrypted files in DropBox. If your DropBox account is compromised the adversary will only get useless encrypted files. Uses EncFS. Has clients for Windows and Mac. The Android and iOS clients are amazing.
To me, the most surprising thing about BoxCryptor is that it's easier to use than DropBox--not an easy feat.
dang · 2022-11-29
We've changed to the third-party article from https://www.boxcryptor.com/en/blog/post/new-chapter-with-dropbox/.
Generally we prefer the best third-party article (if there is one) to a corporate press release: https://hn.algolia.com/?dateRange=all&page=0&prefix=false&…
jasonsync · 2016-07-29
I hear you. Perhaps I'm overly paranoid. I don't think so though!
Many people (eg. http://www.inc.com/larry-kim/5-online-privacy-tips-from-edward-snowden… have asked Google to clarify their policy in this regard, but the "generic" TOS you agreed to is the best they could come up with. The trouble with using soft language is that anything goes.
Data monetization goes way beyond serving relevant ads.
While companies like Sync.com encrypt your data end-to-end (making this a non-issue - shameless plug I know - you should check us out though), if you do continue to use Google Drive you may want to investigate third-party Google Drive encryption software such as https://www.boxcryptor.com/en (I hate to recommend a competitor, but it's better than nothing).
I'm making a strong statement, because I value my privacy.
robfreudenreich · 2014-04-24
You should be able to use it with any mobile encryption app which is compatible to EncFS, e.g. Boxcryptor Classic on Android and iOS (more info: https://www.boxcryptor.com/en/classic)
acjohnson55 · 2014-03-04
My personal solution is to use the free Boxcryptor Classic [1] on top of Dropbox. I've actually replaced my entire Documents folder with a link symlink to its version in my Boxcryptor instance (something I was leery of doing directly in Dropbox, for privacy reasons). So now I get transparent encryption and sync on both of my computers. It's been working amazingly for about 6 months now.
[1] https://www.boxcryptor.com/en/classic
Osmium · 2013-07-20
This looks cool, but of course you can also use encfs directly with Dropbox or, if you prefer a graphical interface, Boxcryptor[1] have a fork of encfs specifically for cloud storage along with some platform-specific apps.
[1] https://www.boxcryptor.com
dteoh · 2013-06-10
I use Dropbox with Boxcryptor (https://www.boxcryptor.com/). It creates an encrypted drive/folder using a key of your own choosing.
rolleiflex · 2013-06-10
Here you go: https://www.boxcryptor.com/en/boxcryptor-classic
It's an offline application that runs on your computer that is transparent to your actions. You just use the drive BC mounts instead of where Dropbox tells you to use, the rest automatic.
denglish · 2013-01-29
We've been using https://www.boxcryptor.com/ on top of Dropbox for passwords and other need-to-keep-very-secure data.
giulianob · 2012-07-19
Why not just encrypt your data with your own keys as well ( https://www.boxcryptor.com/ )
vitalysh · 2012-04-27
You can try using http://www.boxcryptor.com/, up to 2gb free, it encrypts separate files and not entire volume.
jhi247 · 2012-01-04
http://www.boxcryptor.com/ does client-side encryption for DropBox.
Runs on Win, Mac, Linux, iOS, Android.
hrunt · 2019-07-06
Boxcryptor[1] started out as an EncFS[2] implementation. At the time, EncFS was the only real good solution for file-based encryption. Solutions like TrueCrypt are disk-based, which means for cloud syncing solutions like Dropbox, one file -- the entire disk volume -- gets synced, and every time a file changes, the entire disk gets synced again. EncFS encrypts individual files, which works great for file-based syncing services.
Boxcryptor offered a client for macOS, Windows, Android, and iOS that worked really well, and if you needed Linux support, one could install EncFS and use it transparently on that platform. Boxcryptor charged for a creating volumes with more advanced EncFS settings, but if you created the EncFS volume with those advanced settings using EncFS itself (e.g. on a Linux machine), the free version of Boxcryptor could read and write those volumes with those settings.
In 2013, the people who ran Boxcryptor wrote a second version that implemented a proprietary, unpublished encryption and/or file management scheme. They relegated the previous version to an unmaintained Boxcryptor Classic product and eventually removed it.[3] The proprietary version is what is offered today.
IF you want Boxcryptor-like functionality today, the EncFS4win project[4] is a good solution for Windows. EncFS can be installed via Homebrew[5] on macOS and its volumes mounted via a shell script or some FUSE GUI managers. You can install EncFS on Linux and use gencfsm[6] for a GUI…
scr4ve · 2015-12-15
I don't really get why one wants to trust ownCloud with private files:
- "logging changes": https://github.com/owncloud/core/commit/eea96298951805dfc6eb9f58ccb172… vs https://owncloud.org/security/advisory/?id=oc-sa-2014-020
- ownCloud is a PHP application with quite a few third-party modules of varying quality. Looking at the security history of Wordpress, it's not hard to imagine what's going to happen.
- The maximum bug bounty for ownCloud is 500 USD. I think my data easily exceeds that.
- From what I've heard, security fixes are provided to enterprise customers first, so if you're lucky your adversary is one of them and knows about vulnerabilities way ahead of you.
To their credit, ownCloud openly publishes security advisories for every vulnerability, but I still think it's architecturally designed to fail.
Exposing this to the internet is probably a bad idea. If you just need storage, you probably should just use dumb storage. If you need project management stuff and care about privacy, maybe look at https://protonet.info/ or something along those lines. Also https://www.boxcryptor.com is really nice - the Dropbox desktop client does proper cert pinning (ownCloud doesn't) at least.
Other than that, storage connected to a raspi via USB will probably yield rather bad transfer speeds?
bigiain · 2013-09-12
This works, and works well.
I had a little trouble getting it to run on one of my older Mac OSX machines, but I'm pretty sure that was because I had the remains of a previous installation of MacFUSE messing things up -
There's also a MacOSX/iOS/Android/Windows commercial "wrapper" around EncFS which is fully compatible with the compiled-from-source versions of EncFS I've got running on Mac OSX and Linux (ARM and x86) - it's a "binary blob", but if your security/convenience tradeoff lets you consider that, have a look at BoxCryptor Classic:
https://www.boxcryptor.com/boxcryptor-classic
For me, the tradeoff of having secured/encrypted files available on iOS is worth the decrease in security by relying on Secomba GmbH not backdooring me at the request of the NSA or ASIO (my local security agency) – or anybody further down the security agency or law enforcement foodchain. I'm not actually trying to protect myself against targeted surveillance by any sufficiently powerful nation-state, but I feel good about knowing I'm not quite so readily caught up in "dragnet" surveillance…
eps · 2011-06-12
http://boxcryptor.com is another option.
brokenmachine · 2021-12-16
>Replacing iCloud storage with a big hard drive is a bit like replacing a car with a motorcycle.
What you lose in convenience, you gain in privacy, since iCloud backups are not e2e encrypted.
https://www.boxcryptor.com/en/blog/post/iphone-backup-icloud-encryptio…
mnming · 2021-09-04
you may want to take at look at: https://www.boxcryptor.com/en/
phillc73 · 2021-01-18
The other day I found Boxcryptor for Teams[1] which seemed like a useful tool, if the company can be convinced to use it. At least it feels like an option for a privacy concerned organisation, which somehow ended up in the Microsoft 365 ecosystem.
[1] https://www.boxcryptor.com/en/microsoft-teams/
krtkush · 2020-11-08
https://www.boxcryptor.com/en/blog/post/iphone-backup-icloud-encryptio…
Though, it is possible that WhatsApp is encrypting backups before uploading them to iCloud.
treypitt · 2018-12-25
Anyone have experience with Boxcryptor? Haven't tried it since a few years ago (https://www.boxcryptor.com/en/)
icc97 · 2018-03-01
You can use Boxcryptor [0] on top of Dropbox to encrypt everything client side. That's much simpler than PGP.
Yes I agree on the collaboration. I can see how this is more of a security/privacy minded replacement for Google Docs rather than a Word/Excel replacement.
[0]: https://www.boxcryptor.com/en/
manveru · 2012-04-24
Also claims to work on Linux: http://www.boxcryptor.com/download/#platform_linux_dl
goughgough · 2015-08-19
For your information , I am aware of these back up clients and the cloud they can sync to :
-------------------------------
SyncBackPro
http://www.2brightsparks.com/syncback/sbpro.html
Google Drive, Office 365 (OneDrive for Business and SharePoint), OneDrive, Box, Dropbox, SugarSync , Amazon Glacier S3 , Amazon Cloud , Google Storage and Microsoft Azure support
-------------------------------
Arq for Windows and Arq for Mac
https://www.arqbackup.com/pricing/
Amazon Cloud Drive, Amazon Web Services, Dropbox, Google Drive, Google Cloud Storage, or OneDrive account
-------------------------------
Syncovery
https://www.syncovery.com/matrix/ --- features comparison
Supports various Internet protocols, including FTP, FTPS, SFTP/SSH, WebDAV, SSL, HTTP, as well as these cloud services: Amazon S3 and compatible services, Microsoft Azure, Rackspace Cloud Files, Microsoft OneDrive (formerly SkyDrive), Google Drive and Google Docs, DropBox, Box.com, and more....Sugarsync
-------------------------------
Duplicati
www.duplicati.com/
https://en.wikipedia.org/wiki/Duplicati
Duplicati supports not only various online backup services like OneDrive,[1] Amazon S3, Rackspace Cloud Files, Tahoe LAFS, Google Docs but also any servers that support SSH/SFTP, WebDAV, or FTP.
Duplicati is a backup client that securely stores encrypted, incremental, compressed backups on cloud storage services and remote file servers. It works with Amazon S3, Windows Live SkyDrive, Google Drive (Google Docs),…