If you want to add a new vault, you have essentially two options:
If you want to create a vault yourself, choose
Create New Vault.
If you already have a vault, for example because someone shared a vault with you via a cloud storage service, you can instead choose
Open Existing Vault.
Create a New Vault¶
If you chose to create a new vault, the wizard will now guide you through the vault creation process.
1. Choose a Name¶
You start by simply choosing a name for your vault.
Your vault name will be used as a directory name on your file system. Make sure not to use any characters that might cause problems with your setup. Especially if you want to share the vault via the cloud with other users, keep in mind that these users might use different software or operating systems that might not cope well with special characters.
2. Choose a Storage Location¶
Next, choose where you want to save your vault. Since a vault is just a directory containing encrypted files, you need to store it somewhere. Usually this would be inside your cloud-synced directory. But you can choose any storage location, you like.
Keep in mind that Cryptomator is not a sync tool. You still need the software from your favourite cloud storage service.
In this example I want to encrypt files that get synchronized via Dropbox.
You might not see all the above options, depending on what cloud services you have installed on your PC.
Cryptomator tries to detect some well-known locations.
You can always choose
Custom Location and navigate to your cloud storage directory manually.
3. Choose a Password¶
Now it is time to choose a good password for your vault. Cryptomator requires at least 8 characters but we recommend you to use a longer phrases such as pass-sentences. The bar below the password field estimates the strength of your password.
Nobody except for yourself knows this password and other than you might know it from online services, nobody can “reset” your password for you.
If you plan to share this vault with a different person, you will both need to know the password. In this case, choose a password that is different from anything you tend to only use yourself. To share the password, use an encrypted messenger or any other secure means of communication.
Since we can not reset your password, we recommend you to create an additional recovery key.
4. Show Recovery Key (optional step)¶
If you chose to create a recovery key in the previous step, it will now be displayed. Make sure not to lose it. Ideally make a hard copy of it.
Keep the recovery key secret. Remember, just like your password, its purpose is to gain access to your vault!
For more details, take a look at our chapter about how to use a recovery key.
That’s it. You have successfully created a new vault.
You can now unlock this vault using your password and start adding sensitive files to it.
Open an Existing Vault¶
If you chose to open an existing vault, all you need to do is to locate the
masterkey.cryptomator file of the vault you want to open.
If you created the vault on another device and cannot find it or its masterkey file, make sure that the directory containing the vault is properly synchronized and fully accessible on your device.