Boxcryptor

Boxcryptor
Name	Boxcryptor
Developer	Secomba GmbH
Released	0 2011
Operating system	Windows, macOS, Linux, iOS, Android
Genre	Disk encryption, Cloud storage
License	Freemium
Website	https://www.boxcryptor.com

Boxcryptor is a disk encryption software application designed to provide end-to-end encryption for files stored on cloud storage services and local drives. Developed by the German company Secomba GmbH, it functions as an additional security layer by encrypting data before it is synchronized to platforms like Dropbox, Google Drive, Microsoft OneDrive, and others. The software is available for multiple operating systems including Windows, macOS, Linux, iOS, and Android, utilizing a freemium business model.

Overview

Boxcryptor operates by creating a virtual drive on a user's system, allowing for the transparent encryption and decryption of files using strong cryptographic algorithms. It is specifically engineered to work seamlessly with a wide array of cloud storage providers, enabling users to maintain control over their data privacy while leveraging the convenience of services like Amazon S3, Box, and Nextcloud. The application's architecture ensures that only encrypted data is transmitted and stored on third-party servers, with decryption keys remaining solely with the user or their designated key management entities.

Features

Key functionalities include filename encryption, which obfuscates file metadata, and support for multi-factor authentication to enhance account security. The software offers team management capabilities through its Boxcryptor for Business offering, facilitating secure collaboration within organizations by managing user permissions and shared encrypted folders. It integrates with Windows Explorer and macOS Finder for ease of use and supports zero-knowledge architecture, meaning the service provider cannot access user data. Additional features encompass Two-factor authentication via TOTP and U2F security keys, as well as public-key cryptography for secure key exchange.

Technology and security

The software employs the Advanced Encryption Standard with a 256-bit key length in Galois/Counter Mode for file encryption, a combination widely recognized for security and efficiency. For key derivation, it uses the Password-Based Key Derivation Function 2 algorithm, and RSA with OAEP padding is implemented for asymmetric encryption tasks. All cryptographic operations are performed locally on the user's device, adhering to a zero-knowledge proof model. The application's source code has undergone independent security audits by firms like Cure53, and its design aims to protect against threats even if a cloud service provider is compromised.

Company and history

Boxcryptor was founded in 2011 by Robert Freudenreich and Andrea Pfundmeier in Augsburg, Germany, under the parent company Secomba GmbH. The development was driven by growing concerns over data privacy in the early era of widespread cloud computing adoption. The company has since focused on the business-to-business and enterprise software markets, expanding its product suite to cater to organizational security needs. Significant milestones include achieving ISO/IEC 27001 certification for its information security management system and establishing partnerships with various information technology distributors globally.

Licensing and pricing

The software utilizes a freemium licensing model, offering a free version for personal use with limited features, such as support for only one cloud provider and two devices. Paid personal plans, branded as Boxcryptor Unlimited, remove these restrictions and add features like filename encryption. For commercial and organizational use, Boxcryptor for Business provides centralized administration, Active Directory integration, and dedicated support, with pricing based on the number of users. Educational institutions and non-profit organizations may be eligible for discounted pricing through the company's academic and charity programs.

Reception and criticism

Boxcryptor has generally received positive reviews from technology publications such as PCWorld and TechRadar, which have praised its user-friendly interface and robust security integration with major cloud storage platforms. It has been recognized with awards including the German IT Security Award and the CeBIT innovation prize. Some criticism has centered on its reliance on a subscription model for full functionality and potential performance overhead on older hardware. Comparisons are often drawn to other encryption tools like VeraCrypt and Cryptomator, with discussions in communities like Stack Overflow and Reddit focusing on its proprietary nature versus open-source alternatives.

Category:Cloud storage Category:Cryptography software Category:German inventions Category:2011 software