// FEATURES
Everything Cypherrum does
A tour through the encryption, recovery, sharing, and platform features that ship today in v0.12.1.
- 3 OSes
- 5 unlock methods
- 22 languages
- Local-first no cloud required
// ENCRYPTION & RECOVERY
How your data is protected
-
AES-256-GCM chunked encryption
Authenticated encryption per file chunk. The NIST standard.
-
Argon2id key derivation
256 MB · 3 iterations · 4 threads. Slow on purpose.
-
Post-quantum recovery
ML-KEM-768 wraps your master key, so today's backups survive tomorrow's quantum computers.
-
SHA-256 throughout
No legacy hash functions in the vault format — every name and integrity check uses SHA-256.
// UNLOCK METHODS
How you get in
-
Password
Argon2id-hardened. The fallback that always works.
-
Windows Hello
Face, fingerprint, or PIN on Windows 10+.
-
FIDO2 / passkey
YubiKey, Solo, or any FIDO2 authenticator.
-
Password manager
Bitwarden, 1Password, KeePassXC, pass, LastPass, or a custom webhook.
-
Remember me
OS keyring on every platform — Windows Credential Manager, macOS Keychain, Linux Secret Service.
// SHARING & MESH
Sharing without giving up control
-
P2P mesh
Direct LAN transfers when devices are nearby, relay-assisted when they aren't. No central server holds your data.
-
Shared vaults
Grant access to a vault, not a folder copy. Changes propagate.
-
Trusted contacts (QR pairing)
Scan a QR code to add a device or person. No accounts, no servers.
-
Audit log + revocation
See who opened what. Cut access instantly.
-
TURN relay
Falls back to a relay when peer-to-peer can't connect through a hostile NAT.
// CROSS-PLATFORM
Wherever you work
-
Windows
Dokany kernel-mode mount (MIT-licensed driver, bundled in the installer). WebDAV fallback built in. Signed via Azure Artifact Signing (publisher: Logiqum Korlátolt Felelősségű Társaság).
-
macOS
WebDAV mount via the OS-native mount_webdav. Apple Silicon and Intel.
-
Linux
FUSE mount. Ships as .deb, .rpm, and a portable .tar.gz.
Mobile apps (iOS and Android) are on the v1.0 roadmap.
// PRODUCTIVITY & POLISH
Little things that matter
-
22 languages
UI and docs translated to 22 languages, 280+ strings — including German, French, Spanish, Japanese, Hungarian.
-
Auto-update
Signed update checks built in. First install is the last install ceremony.
-
Cryptomator vault import
Migrate existing Cryptomator vaults into Cypherrum's native format.
-
cypherrum-admin CLI
Service operations and patch tooling for sysadmins and power users.
Want to know exactly how this all works? The security page breaks it down end-to-end.