AeroCrypt

Zero-knowledge encryption over any provider - bind it once, and the whole app decrypts transparently.

Zero-knowledge, on any cloud

AeroCrypt turns any provider - S3, Google Drive, an FTP box, anything - into zero-knowledge storage. Files are encrypted on your machine before they leave, and so are their names and folder structure. The provider stores nothing but opaque ciphertext, and only you hold the key.

Binding a crypt overlay to a saved profile so the whole app decrypts on connect

Bind once, decrypt everywhere

Set up an overlay on a remote folder, then bind it to a saved profile. From that point on, the whole app decrypts it automatically on connect - CLI ls/get/sync, the GUI, MCP tools and background sync all see plaintext, while the cloud only ever sees ciphertext. No separate unlock step, no surface that can leak plaintext by accident.

Names and structure, hidden too

Most cloud encryption still leaks your filenames. AeroCrypt encrypts content and names, so a snoop with access to the bucket cannot even tell what you have. You browse a normal, readable tree, while the remote is just a directory of meaningless encrypted names. Choose a headed layout for portability, or a headerless mode that keeps metadata local.

A crypt overlay listing decrypted names locally while the remote shows encrypted filenames
AeroCrypt writing files in rclone crypt format and opening a Cryptomator vault

Compatible with rclone crypt and Cryptomator

Already invested in another tool? AeroCrypt speaks their formats. It can encrypt and upload in the rclone crypt format, so your files stay readable by an existing rclone crypt remote, and it is byte-for-byte Cryptomator compatible both ways. Move in without re-encrypting your world, and keep your options open.

Encryption that cannot be bypassed

Because the overlay is wired in at the provider layer, every path is protected the same way - a script using the CLI, an AI agent calling an MCP tool, a scheduled background sync, or a drag-and-drop in the GUI. There is no back door that quietly writes plaintext, which is exactly what zero-knowledge should mean.

The crypt overlay enforced across CLI, GUI, MCP and sync surfaces
Free & open source

Own your keys, use any cloud

Download AeroFTP and turn your first remote into zero-knowledge storage.

Download Now View on GitHub