// HOW WE COMPARE
Cypherrum vs VeraCrypt vs Cryptomator
An honest, side-by-side look. Every Cypherrum capability below ships today in v0.12.1 — and where the others are ahead, we say so.
| Cypherrum | VeraCrypt | Cryptomator | |
|---|---|---|---|
| Encryption model | Local-first vault, chunked per-file | Fixed-size container / volume | Per-file (cloud overlay) |
| Post-quantum cryptography | Shipped — ML-KEM-768 (FIPS 203) | None | Roadmap only (Hub, not shipped) |
| Secure sharing between users | Peer-to-peer mesh, built in | None | Centralized Hub (separate paid product) |
| At-rest cipher | AES-256-GCM | AES / Serpent / Twofish (cascades) | AES-256-GCM |
| Cloud-sync friendly | Yes — chunked format | Poor — whole container re-uploads | Yes — per-file |
| Biometric / hardware unlock | Windows Hello + FIDO2 / YubiKey | No | No |
| Password-manager integration | Bitwarden, 1Password, KeePassXC, pass… | No | No |
| Platforms | Windows, macOS, Linux | Windows, macOS, Linux | Win, macOS, Linux, iOS, Android |
| Mobile apps | Not yet (planned) | No | iOS + Android |
| Independent security audit | Planned (pre-1.0) | Yes (2016, 2020) | Yes (2017) |
| Source model | Proprietary · relay is GPL-3.0 | Apache 2.0 + TrueCrypt 3.0 (contested) | GPL-3.0 |
| Status | Active | Active | Active |
Competitor details from public documentation as of June 2026. VeraCrypt and Cryptomator are trademarks of their respective projects; Cypherrum is not affiliated with either. Corrections welcome via support.
Post-quantum, today
Vault recovery keys, hybrid master-key wrapping, and mesh share tokens use ML-KEM-768 (NIST FIPS 203) — protecting share material against “harvest-now, decrypt-later” attacks. VeraCrypt has none; Cryptomator’s post-quantum work is still roadmap.
Sharing without a server
Share a vault directly between people over an encrypted peer-to-peer mesh — LAN-direct with relay fallback, conflict resolution built in. No central key server, no separate paid Hub.
Local-first by default
Your keys never leave your device and no cloud account is required. Open an encrypted vault as a normal drive on Windows, macOS, and Linux.
// COMING FROM BOXCRYPTOR?
Boxcryptor shut down. Your files don’t have to.
After the Dropbox acquisition, Boxcryptor was discontinued and its servers taken offline. Cypherrum is a local-first successor in the same spirit — transparent per-file encryption that mounts as a drive — but your keys stay on your device, with no server that can be switched off.
Download CypherrumWhere we’re still catching up
Cryptomator has mature mobile apps and both it and VeraCrypt have completed independent security audits — Cypherrum’s mobile apps and first external audit are on the road to 1.0, not shipped yet. We’d rather tell you that than pretend otherwise. Follow progress on the changelog.