You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/desktop/encrypted-file-names.md
+50-43Lines changed: 50 additions & 43 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7,72 +7,41 @@ sidebar_position: 7
7
7
# Encrypted File Names
8
8
9
9
:::info
10
-
Neither file name nor directory structure encryption can be disabled.
10
+
File name and directory structure encryption **cannot** be disabled.
11
11
:::
12
12
13
-
Cryptomator protects your files by not only encrypting their content, but also their names and the overall directory structure of the vault.
14
-
For example, if you have a directory structure inside your vault like this:
13
+
Cryptomator protects your files by not only encrypting their content, but also their names and the overall directory structure of the vault. As a result, encrypted files and folders inside the vault storage location do not reveal the original names or layout (for an example see [below](#technical-example)).
15
14
16
-
```
17
-
.
18
-
├─ myProject.pptx
19
-
├─ Images for Project
20
-
│ └─ ImageOfBees.jpg
21
-
└─ ...
22
-
```
23
-
24
-
The actual directory structure of the vault on your hard drive/cloud will look like this:
15
+
This matters whenever you need to match a cleartext file in your unlocked vault with its encrypted counterpart in the vault storage location, for example when restoring an older version from a cloud provider or backup tool.
The app offers two features to reveal the mapping between the cleartext and the encrypted files:
18
+
*`Locate Encrypted File`: You have the cleartext file in the unlocked vault and want to find its encrypted counterpart in the vault storage location.
19
+
*`Decrypt File Name`: You have an encrypted vault file and want to know its original cleartext name.
42
20
43
-
While this increases security, it also makes it impossible to see the original file names and directory structure without decrypting them first.
44
-
When you need to know the original name of a file (e.g. to restore an older version), you can use the `Decrypt File Name` feature to decrypt the file name.
45
-
Conversely, if you need to find the encrypted counterpart of a file inside the vault, use the `Locate Encrypted File` feature.
21
+
<Imagesrc="/img/desktop/vault-detail-unlocked.png"alt="Vault detail view in the unlocked state"width="495"height="381" />
46
22
47
23
## Locate Encrypted File {#locate-encrypted-file}
48
24
49
-
The Locate Encrypted File feature helps you find the encrypted version of a specific file from inside the vault. This comes in handy when vault files are versioned and you want to restore an older version of a file. As Cryptomator encrypts file names and obfuscates directory structures, first locate the encrypted file and then restore an older version of the encrypted file with a third-party app.
25
+
The Locate Encrypted File feature helps you find the encrypted counterpart of a file from inside the vault. This comes in handy when you want to restore an older version of a file. As Cryptomator encrypts file names and obfuscates directory structures, first locate the encrypted file and then restore an older version of the encrypted file with your third-party app.
50
26
51
27
1. Unlock the desired vault.
52
28
2. Click on the `Locate Encrypted File` button.
53
29
3. Select the file within the vault.
54
30
55
31
As an alternative for clicking the button, you can directly drag & drop a file onto the button.
56
32
57
-
A file manager window opens showing the encrypted folder and marking the encrypted file.
33
+
A file manager window opens showing the encrypted folder and marking the encrypted file inside the vault storage location.
58
34
59
-
## Decrypt File Names {#decrypting-file-names}
60
-
61
-
:::note
62
-
Due to technical reasons, Cryptomator can only decrypt the name of an encrypted file if that file is provided by itself.
63
-
It cannot determine the file's cleartext path.
64
-
:::
35
+
## Decrypt File Name {#decrypt-file-name}
65
36
66
-
The Decrypt File Name feature helps you resolve encrypted file names back to their original cleartext names. To map encrypted files back to their cleartext names, just drag and drop the files onto the button in the unlocked vault section of the main app.
37
+
The Decrypt File Name feature helps you resolve encrypted file names back to their original cleartext names.
67
38
68
39
1. Unlock the desired vault.
69
40
2. Click on the `Decrypt File Name` zone at the bottom of the unlocked view.
70
41
3. Select the encrypted file.
71
42
72
43
As an alternative for clicking the zone, you can directly drag & drop files onto it.
73
44
74
-
<Imagesrc="/img/desktop/vault-detail-unlocked.png"alt="Vault detail view in the unlocked state"width="495"height="381" />
75
-
76
45
A modal window opens showing a two-column table with the encrypted names on the left and their decrypted, cleartext names on the right.
This is why you cannot identify files in the vault storage location by name alone without decrypting them first. For more information about the vault encryption scheme read [the specification](/docs/security/vault.md).
0 commit comments