iCloud to Cryptomator: Encryption Guide

iCloud offers seamless integration with Apple devices, but its privacy model has limitations. Apple can access your files under certain circumstances, and your data is stored on Apple's servers under US jurisdiction. Cryptomator provides a solution: client-side encryption that encrypts your files before they leave your device, ensuring that only you can access them, regardless of which cloud storage provider you use. This guide shows you how to add strong encryption to iCloud or any other cloud storage service.

Why leave iCloud?

• Apple can access your iCloud files under certain circumstances (legal requests, security investigations)
• iCloud data is stored on Apple's servers, which are primarily in the USA (subject to US surveillance laws)
• Apple's business model includes iCloud storage as a paid service, creating financial incentives
• iCloud lacks end-to-end encryption by default for most file types (only some data is end-to-end encrypted)
• US-based companies can be legally compelled to hand over your data to government agencies
• Apple has complied with government requests for user data in the past
• iCloud backups of your devices can be accessed by Apple and potentially by law enforcement
• Apple's privacy protections are good but not absolute - they can and do access user data when legally required

Migration steps

1. 1. Download and install Cryptomator — Download Cryptomator from the official website. It's available for Windows, macOS, Linux, iOS, and Android. Install the app. Never download from third-party sources. Cryptomator is open source and free for personal use.
2. 2. Create your first vault — Open Cryptomator and click 'Create New Vault'. Choose a location for your vault file (this is a small file that contains the encryption keys, not your actual data). Give your vault a name. Choose a strong password - this is critical as it protects all your encrypted files. Click 'Create'.
3. 3. Choose a cloud storage location — Select where your encrypted vault will be stored. In Cryptomator: Click 'Add Cloud Provider' and choose your cloud service. For iCloud: select iCloud Drive. For other services: select accordingly. Alternatively, choose a local folder that syncs with your cloud storage (like your iCloud Drive folder on your Mac).
4. 4. Unlock your vault — Enter your vault password and click 'Unlock'. Cryptomator will mount your vault as a virtual drive on your computer (like a USB drive). On macOS: appears in Finder. On Windows: appears in File Explorer. This virtual drive is where you'll store your encrypted files.
5. 5. Move files to your encrypted vault — Drag and drop files into your unlocked Cryptomator vault. These files will be automatically encrypted and uploaded to your cloud storage. You can organize files into folders within the vault. The encryption happens transparently in the background.
6. 6. Wait for sync to complete — Allow time for your files to be encrypted and uploaded to your cloud storage. Check your cloud provider's web interface or app to verify files are appearing. The encrypted files will have different names and appear as random data to anyone without the password.