I know, I know. Don’t tell me. I have been a bit AWOL for a while. Day job and miscellaneous other excitement.
But I’m back, and have something to talk about, which certainly helps when trying to write. The common complaint raised by cloud opponents is the lack of security when you move your valuable data out of your direct control and into the ambiguous grasp of a server in Mozambique. For those of you out there using the cloud and enjoying all that mobility and freedom, you may be interested in a little tool called Boxcryptor. Boxcryptor is an encryption application for common cloud services like Dropbox, Box, Google Drive and SkyDrive, all of which I happen to use, as well as any cloud using a WebDAV standard. It is also platform independent, so you can use it on your Mac or PC, Chromebook or Android or iOS device.
Boxcryptor creates a crytopgraphic virtual drive on your computer. Files are encrypted locally before uploading them to your cloud of choice. Files are encrypted on an individual, rather than grouped, basis for added security. Any file dropped into an encrypted folder within the Boxcryptor drive will get automatically encrypted before it is synced to the cloud. To protect your files, Boxcryptor uses the AES-256 and RSA encryption algorithms. I love that it basically encrypts files on the fly, as part of your normal process of creating and saving data – just drop your files in the special secure drive rather than your usual cloud folder. You will know that your files are encrypted when you look in the cloud and see the .bc extension following the file name. It looks really simple to use, which is always nice.
Of course, to be really useful, the cloud has to allow for multi-party file sharing. It’s one of the main reasons to use it! Boxcryptor supports this, and accomplishes it in a secure way.
You won’t be able to see your encrypted files without Boxcryptor installed. So, you will need to have it on any computers on which you intend to view your sensitive material. However, once installed, just enter your Boxcryptor password to get into your materials. A word of caution here: that password information is not stored either locally or with Boxcryptor and you won’t be able to retrieve it if you forget it, once it is set. So choose carefully and store it somewhere safe. Since everything is locally encrypted, Boxcryptor has no access to your data either, so no worries there.
Boxcryptor is free for personal use and it does offer AES-256 and RSA encryption, secure file sharing and mobile apps. The limitation is that you can only use one cloud service at a time with the free. Unlimited personal for $48 per year allows unlimited providers on unlimited devices. Company subscriptions offer multiple cloud services at once as well, along with groups, with multi-user pricing that goes down as you add more users. Company plans start at $96 per year for unlimited business use. The company plan also offers a master key and password reset function, enforce policies and centralized management and invoicing.
Because Boxcryptor believes its product is of particular interest to legal professionals, they sent me along a coupon code for Studio readers of 20% discount on their regular prices (discount code: boxcryptorlaw20, valid until December 31, 2013). So, if your resolution for 2014 includes greater cloud security, hop on that train and grab yourself some Boxcryptor.