Michael Logies wrote:
> I think, Veracrypt is mainly used on Windows and Linux, at least
> that's my use.
Mine too. Mostly. It's how I keep my personal data off the cloud.
The desktop has the advantage of the keyboard, mouse & large monitor.
Luckily with Android, that same desktop convenience is freely available.
<
https://i.postimg.cc/cJLK1wt0/webdav07.jpg> Android on a desktop is easy
Which allowed me to use the desktop to test out the suggested solution.
<
https://i.postimg.cc/vZd9t0ZX/cryptomator01.jpg> Need Android APK
> I don't see much value in using my encrypted containers
> (100-200 GB) on Android.
I keep an encrypted file system of less than a tenth of that size for
important records such as medical and financial and personal data.
That encrypted file system is managed on the desktop and copied to the
mobile devices over my local Wi-Fi network (keeping it off the cloud).
Thank you for that advice of the FOSS cryptomator, which I openly admit
that I had never heard of until this very moment that you suggested it.
<
https://www.cloudwards.net/cryptomator-review/>
<
https://cryptomator.org/downloads/>
Name: Cryptomator-1.6.15-x64.exe
Size: 56829608 bytes (54 MiB)
SHA256: 8DE5AF809F92ACB5BF957E6DC02B519E6552A29903B57D724E208DCA28E1A87F
1. With Cryptomator, you assign a password for a folder.
(We call it a vault - within your cloud.)
2. To access the vault, simply enter the password again.
3. You will be provided with a virtual encrypted drive.
(To which you can move your data - just like a USB flash drive).
Every time you store something on this drive,
Cryptomator encrypts the data automatically.
To always kindly help others who simply need to read what I write to learn
from what I am doing, I will record my observations as I test it out now.
Having come from the UNIX/Solaris/Masscomp/DEC/VAXVMS/PIBM world, I have
installed thousands of programs, so I know a lousy installer when I see it.
While I understand that cryptomator is open source so the source code can
be fixed, the installer is a classic example of poorly designed software.
It doesn't even _ask_ where it should go, which is breaking rule #1 first
thing, right off the bat, which indicates it's not well vetted software.
Moving forward with a single strike in a single pitch, at least it didn't
appear to phone home or do other indefensible acts although it did pull up
an empty command window which lasted a while and then disappeared).
It also didn't even ask to create a desktop shortcut, which is no big deal
but which I then had to hunt out to just find where the program installed.
A "repair" process from within the cryptomator installer program didn't
even ask what to repair, and simply said it had completed the repair.
Hunting down where it installed (I don't use the start menu as I maintain
my own cascaded menu system pinned to the Windows taskbar on my own), we
find it installed into the unused location C:\Program Files\Cryptomator.
Notice the astoundingly huge size difference between installer & installed.
Name: C:\Program Files\Cryptomator\Cryptomator.exe
Size: 592064 bytes (578 KiB)
SHA256: B2591EA615C79A28348BF6D74A945B7E57A81510F5D6DC7674C0632D4E5C8A75
The first thing I did was move the directory to where it belongs (where, in
case folks don't know, _you_ define where things belong - not a million
developers each of whom doesn't have any idea of how to code installers).
Then I was pleased to find out I didn't need to uncheck the option to check
for updates (which is normally left checked in typical sleazy software).
The "Volume Type" is set to "FUSE" although "WebDav" is the other option.
Also I didn't receive any firewall warnings after placing the shortcut into
the proper cascaded menu system and to its credit, the software came up
after being moved (which doesn't always happen with poorly written tools).
First thing I see is an easy-to-find button which says "Add Vault" so I
duly follow instructions which are about as well designed as they can be.
1. Add Vault
2. Create New Vault
3. Choose a name for the vault = foo
4. Next
5. Where should Cryptomator store the encrypted files of your vault
Choices are "OneDrive" & "Custom location"
6. Since I would never use mothership cloud services, I choose the latter.
7. Custom location > Choose > c:\tmp\special\cryptomator\foo
8. Next
9. Enter a new password = foobar12 (it requires at least 8 characters)
10. Do you want a recovery key for the case you lose your password? = No
11. Create Vault
12. Added vault "foo".
Interestingly the vault was apparently created nearly instantly, and there
was no request for seed entropy and no request to predetermine the size of
the vault nor any selections on the choice of encryption algorithms.
To my surprise the "foo" directory contained 'stuff' inside it, where I had
expected it to not "do anything" when Windows clicks on it - but it opened
to a set of files, such as "IMPORTANT.rtf" & "masterkey.cryptomator", etc.
I renamed the "foo" directory to "snafu" but then cryptomator wasn't smart
enough to find it, so I had to rename it back to "foo" as a result.
Running the cryptomator.exe.lnk shorcut, up pops an "Unlock..." button.
1. Unlock
2. Enter password for "foo":
3. Unlock successful.
Content in vault "foo" is now accessible over its mount point.
4. Reveal Drive
That "revealed" a mounted drive on Windows of the same size as the system.
The Cryptomator GUI remains up with a "Lock/Unlock" toggle to manage it.
Overall, comparing the use model to that of Veracrypt/Truecrypt, it's much
easier for the hoi polloi to utilize, even as it's slightly different in
use (e.g., there's very little by way of choosing how you like it to be).
Now, the question is how to utilize that encrypted container on Android.
<
https://github.com/cryptomator/android>
Since Android mounts as a drive onto Windows over Wi-Fi using WebDAV
protocols, I copied the locked "foo" container from Windows to Android.
<
https://i.postimg.cc/BvJdKWzt/webdav06.jpg> Both sdcards mounted
The basic syntax to "mount" Android over Wi-Fi is as shown below:
c:\> net use M: \\192.168.0.2@8080\DavWWWRoot /USER:foo bar
And the basic syntax to mirror Android over Wi-Fi is as shown below:
c:\> adb connect
192.168.0.2:43210
c:\> scrcpy -s 192.168.0.2
The result being a seamless integration of Android & the desktop.
<
https://i.postimg.cc/qv6HJ7GN/webdav08.jpg> Mount /storage/emulated/0
Now let's copy the cryptomator volume onto the Android filesystem.
Using a FOSS anonymous Google Play Store client Aurora, we search for
cryptomator and find, much to our chagrin, it's not a general purpose
solution since it's a twelve dollar item which requires privacy breaches
such as the inclusion of Google's GSF spyware into its program code.
<
https://play.google.com/store/apps/details?id=org.cryptomator
Hmmm... it's supposed to be a free tool on all common platforms.
<
https://levelup.gitconnected.com/how-to-secure-your-cloud-data-with-cryptomator-35ff2c9709e2>
"Cryptomator is a free tool that runs on Windows, macOS, Linux,
iOS, and Android."
Even though when we set up our Google Play Store filters to eliminate
privacy flaws, the few potential privacy based apps that show up
don't advertise they'll understand a cryptomator encrypted volume.
*Tresorit* (free, no ads, no gsf) Encrypted cloud storage service
for syncing and sharing confidential documents
<
https://play.google.com/store/apps/details?id=com.tresorit.mobile>
*Boxcryptor* (free, no ads, no gsf) Secure your files in the cloud -
fast and easy enryption with Boxcryptor
<
https://play.google.com/store/apps/details?id=com.boxcryptor2.android>
*Proton Drive* Cloud Storage (free, no ads, no gsf) Encrypted storage
space. Private and secure. Fast intuitive & easy to use
<
https://play.google.com/store/apps/details?id=me.proton.android.drive>
But none of those, found with the search term "cryptomator" in the FOSS
Google Play Store client, seem to open up the cryptomator volumes (yet).
<
https://cryptomator.org/tags/android/>
Searching for the "correct" free cryptomator APK for Android nets
<
https://cryptomator.org/android/>
<
https://static.cryptomator.org/android/1.7.5/Cryptomator-1.7.5.apk>
Name: Cryptomator-1.7.5.apk
Size: 21502366 bytes (20 MiB)
SHA256: CDD87E27E8F04910C5EFAE012E3F1EF90BC64922F16A7CD135B5C8125D00E200
But when I slide that over from the desktop to Android over Wi-Fi and
tap it using my desktop mouse, it gives the payware warning
"We detected that you installed Cryptomator without using Google Play
Store. Provide a valid license, which can be purchased on
https://cryptomator.org/android/"
How can they call it "free" when it requires a payware license?
Dunno yet. But searching seems to find it on the F-Droid repos.
<
https://community.cryptomator.org/t/cryptomator-for-android-is-now-available-via-our-f-droid-repository/7744>
<
https://docs.cryptomator.org/en/latest/android/setup/#id3>
<
https://gitlab.com/fdroid/rfp/-/issues/713>
etc.
Seems sleazy to me to say it's free when it's not free at all.
As a general-use project, it has to be free or it's worthless.
If there is a _different_ free Android non-gsf ad free app which
reads/writes to/from cryptomator volumes, though (much like how the EDS app
reads/writes to/from TrueCrypt/Veracrypt volumes), that would work.
Is there?
It's either free, or it's not free, right?
It's sleazy to claim it's free when/if it's not free; so maybe I need to
search better given I've never heard of this app until this very day.
Let's try these next on Android.
<
https://github.com/cryptomator/android/releases/tag/1.7.5>
Cryptomator-1.7.5_signed.apk
<
https://github.com/cryptomator/android/releases/download/1.7.5/Cryptomator-1.7.5_fdroid_signed.apk>
Name: Cryptomator-1.7.5_fdroid_signed.apk
Size: 20620571 bytes (19 MiB)
SHA256: 37B023E73C040694577FCF3DA8EB8545330877EF3A8E5FB46E523892C7F5A965
Cryptomator-1.7.5_signed.apk
<
https://github.com/cryptomator/android/releases/download/1.7.5/Cryptomator-1.7.5_signed.apk>
Name: Cryptomator-1.7.5_signed.apk
Size: 21502366 bytes (20 MiB)
SHA256: CDD87E27E8F04910C5EFAE012E3F1EF90BC64922F16A7CD135B5C8125D00E200
Unfortunately, they too come up with the license requirement error.
Even so, I'm sure there is a general purpose solution (their almost
always is for any Android, Linux, or Windows problem set after all).
But what is that general purpose solution for reading/writing to/from
cryptomator volumes created on the desktop and copied over to the phone?
<
https://i.postimg.cc/vZd9t0ZX/cryptomator01.jpg> Need Android APK
--
Posted out of the goodness of my heart to disseminate useful information
which, in this case, is to flesh out a general purpose solution for anyone
to read/write encrypted file containers on the desktop & mobile device.