Cryptomator is cross-platform software from Skymatic UG for encrypting files stored on cloud services. You create an encrypted vault on the cloud drive, with a password, then drag and drop files into a virtual USB drive locally, while Cryptomator encrypts and decrypts files going to and from the cloud vault, unlike Dropbox, iCloud and most other services.

Most cloud providers encrypt data only during transmission or they keep the keys for decryption for themselves. These keys can be stolen, copied, or misused. Thanks to Cryptomator, only you have the key to your data in your hand.

Cryptomator allows you to access your files from all your devices. It’s easy to use and integrates seamlessly between your data and the cloud.

(See Cryptomator docs and FAQ for additional details.)

Cryptomator 1.5.1 is open-source donationware for OS X 10.11 and later, Linux, or Windows. (Cryptomator support is also built into David Kocher’s MountainDuck and Cyberduck apps.)

Cryptomator 1.5.0 is priced at $4.99 for iOS 10 and later.

Mountain Duck

Mountain Duck is a cross-platform utility from David Kocher (Iterate GmbH) that “lets you mount any remote FTP, SFTP, WebDAV, S3 and OpenStack Swift server storage as a local disk in the Finder. Open remote files with any application and work like on a local volume. Transfer files using Finder to remote servers, fast.” Among many MountainDuck features is support for Cryptomator interoperable secure vaults (like cross-platform, cloud-friendly versions of Apple’s FileVault-encrypted Mac disk images).

Mountain Duck 3.3.6 is priced at $39 for OS X 10.11 and later with a trial version available for downloading (and also is available for Windows). The latest release has some bug fixes, after the previous release added support for TLS 1.3 networking and for Cryptomator Version 7 vaults. While Version 4.0.0 is in beta testing with some new features, Version 3 already added a smart synchronization feature for offline support:

Like Dropbox for any cloud storage with smart synchronization. Files are synchronized to your local disk when opened to allow offline usage and changes are uploaded in the background as soon as a connection is available. You can also explicitly select files and folders available for offline use.

BitLocker Anywhere, NTFS for Mac

BitLocker Anywhere For Mac, from China-based Hasleo Software (née “EasyUEFI”) promises to “encrypt drives with BitLocker Drive Encryption, decrypt BitLocker-encrypted drives, change password for BitLocker-encrypted drives, export BitLocker Recovery Key & Startup Key, mount and unmount BitLocker encrypted drive, open, read and write BitLocker-encrypted drives or BitLocker To Go drives in macOS & OS X.”

BitLocker Anywhere For Mac is priced at $39.95 (currently $29.95) for OS X 10.7 and later, with an unsigned installer offered as a free 15-day trial.

Hasleo NTFS for Mac is software for full access to the standard Windows filesystem to “mount, unmount, read and write NTFS drives easily, safely and seamlessly in macOS & OS X.” (Apple only offers read access to NTFS volumes.)

Hasleo NTFS for Mac 3.4 is a free download for OS X 10.7 and later.


Signal is a secure, cross-platform communications system that offers encrypted voice calls, text messaging and group chat, video calls and the ability to send a photo, video or document.

Other features include a simple user interface (especially in comparison with Apple’s Messages app), and good performance, even over limited bandwidth connections. The app can communicate with other Signal users it finds via your iPhone Contacts after you activate your phone number on the system. (See Signal support pages for more details.)

Signal Private Messenger 3.6.1 is a free, open-source download for iOS 10 and up.

Signal Desktop 1.32.1 is a free app for OS X 10.10 and up, Linux (Debian-based) or Windows, linking to your iPhone Signal account (with the phone scanning a QR code that’s displayed on the Mac screen).

As an Open Source project supported by grants and donations, Signal can put users first. There are no ads, no affiliate marketers, no creepy tracking. Just open technology for a fast, simple, and secure messaging experience.


KeePassXC is a cross-platform password manager that features AES/Twofish encryption with a 256-bit key, a password generator, auto-type, csv import and database merging, website favicon support, SSH agent integration, and more, including YubiKey challenge-response support, TOTP generation, DEP and ASLR hardening, browser support, and a command-line program. (See EFF article, plus the KeePassXC docs and FAQ for more details.)

KeePassXC 2.5.2 is freely downloadable, open-source donationware for macOS 10.12 and later, plus Linux and Windows. The latest release brings a few fixes, changes and improvements.

KeePassXC-Browser is a plug-in for Google Chrome, Chromium, Firefox and Vivaldi that connects to KeePassXC.