How to set up Cryptomator with Nextcloud

Cryptomator encrypts your files on your own device before they reach the cloud, so the storage provider only ever sees scrambled data. This guide uses a free Nextcloud account for storage.

Part 1: Create a Nextcloud account

1. On a computer or phone, open nextcloud.com/signup and pick a free provider from the list.
2. Sign up with an email address and a strong password. Some providers ask you to confirm your email. If you do not want to use your own, create a free receive-only address on your Juvega account (how to use free Juvega email addresses) and use it to confirm.
3. Log in and open the Files app.
4. Open Files settings (the gear icon at the bottom left).
5. Copy the WebDAV address. It looks like https://your-provider.example/remote.php/dav/files/your-username/. Save it somewhere you can paste from, because Cryptomator needs it next.

Part 2: Set up Cryptomator

1. Buy a lifetime Cryptomator license key from the Juvega shop, or from another reseller.
2. Download Cryptomator from cryptomator.org or from Aurora Store on your phone (see how to install apps on GrapheneOS).
3. Open the app and enter your license key when asked.
4. Create a new vault and choose WebDAV as the storage location.
5. Enter the WebDAV address, your Nextcloud username and your Nextcloud password, then confirm.
6. Choose a vault name and the Nextcloud folder where the vault should live.
7. Set a vault password. Use a long, unique password, because there is no way to recover a vault if you lose it.
8. When it says the vault has been created, open it from the vault list by entering the password.
9. Create folders and add files. Anything you put inside the unlocked vault is encrypted automatically.

Tip: for the strongest protection, encrypt very sensitive files with PGP first using OpenKeychain, then put the encrypted file in your vault.

Good habits

• Lock the vault when you are done.
• Keep a written copy of the vault password in a safe place.
• Do not edit or rename files inside the encrypted storage folder from the Nextcloud website. Work with them through Cryptomator only.