Cryptomator Files

For a comprehensive view of changes, read the CHANGELOG.

Security Fixes 🚨

• Windows: Fixed a standard user being able to plant the admin config C:\ProgramData\Cryptomator\config.properties before installation and thereby make other users load arbitrary plugins. The installer now secures the directory before writing into it and Cryptomator ignores the admin config unless it, its directory and all ancestors are owned by SYSTEM, Administrators or TrustedInstaller and cannot be modified by other principals (#4362)

What's New 🎉

• Supporter certificates signed via a certificate chain (x5c header) are now accepted (#4171)
• Improved usability of the trust on first use dialog (#4295)
• Masterkey files whose scrypt parameters require more than 64 MiB of memory are now rejected before key derivation, with a dedicated error dialog on unlock and password change (#4355)

Bugfixes 🐛

• Fixed "Locate encrypted file" opening the file instead of revealing it in the file manager on Linux (#4272)
• Fixed password retrieval from keychain not working while the system keychain is locked on Linux (#4294, #4301, #4302)
• Fixed keychain backend and quick access settings being reset when the selected service was unavailable at startup (#4346)
• Fixed changing the keychain backend leaving the Hub device key behind; the previous backend is now kept if moving the saved passwords fails (#4346)
• Fixed Hub unlock failing until manual cleanup when the device key file and its stored passphrase did not match (#4346)
• Fixed stucked/hanging vault (no directory listing or vault lock possible) by single broken directory link file (e.g. an empty dir.c9r) ([cryptomator/cryptofs#365](https://github.com/cryptomator/cryptofs/issues/365))

Other Changes 📎

• Added Maven profile to run the app from the command line (#4317)
• Updated to JavaFX 25.0.5 including several (security) fixes (see release notes) (#4356)
• Updated Flatpak runtime to Freedesktop 26.08 (#4352)
• Updated translations (#4261)
• Updated dependencies:
• org.cryptomator:cryptofs from 2.10.0 to 2.11.1
• org.cryptomator:cryptolib from 2.2.2 to 2.4.0
• org.cryptomator:fuse-nio-adapter from 6.0.1 to 7.0.0 (#4353)
• org.cryptomator:integrations-api from 1.9.0 to 1.10.0
• org.cryptomator:integrations-linux from 1.7.0 to 1.8.0
• org.cryptomator:integrations-mac from 1.5.0 to 1.5.1
• org.cryptomator:integrations-win from 1.6.1 to 1.6.2
• org.cryptomator:webdav-nio-adapter from 3.0.2 to 3.0.3
• org.cryptomator:webdav-nio-adapter-servlet from 1.2.12 to 1.2.15
• ch.qos.logback:logback-core from 1.5.35 to 1.6.5
• ch.qos.logback:logback-classic from 1.5.35 to 1.6.5
• com.auth0:java-jwt from 4.5.2 to 4.6.2
• com.fasterxml.jackson.core:jackson-databind from 2.21.4 to 2.21.8
• com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.21.4 to 2.21.8
• com.github.ben-manes.caffeine:caffeine from 3.2.4 to 3.3.1
• com.google.dagger:dagger from 2.59.2 to 2.60.1
• org.apache.commons:commons-lang3 from 3.20.0 to 3.21.0
• org.slf4j:slf4j-api from 2.0.18 to 2.0.20

New Contributors

• @s-h-a-d-o-w made their first contribution in https://github.com/cryptomator/cryptomator/pull/4269

Full Changelog: https://github.com/cryptomator/cryptomator/compare/1.19.4...1.19.5

📜 List of closed issues and pull requests is available here

💾 SHA-256 checksums of release artifacts:

7c82afc1ed4710195245d0db50bde7952e64fa9250fa4a0ccbfd6d9727e9c5b4  cryptomator-1.19.5.tar.gz
59c4cd66d78bb335524a4b309a713563167c089be42b398f9a448c0f78a35133  Cryptomator-1.19.5-x64.exe
36606757e2bcdead1300e25151c6519b82134f2cf12afb1dd5033ca9b2a8b774  Cryptomator-1.19.5-x64.msi
9db920e8476010e1f2ad3fc186a71f3ab163516ccaf1d494fa616e920cfc0682  Cryptomator-1.19.5-x64.dmg
0df28420179f63a3a9b44c2212907c590b7cd92875970f54a16960db29de3beb  Cryptomator-1.19.5-arm64.dmg
a4e7b885bc3ee6c65e5e0b95d15088567ed97670ce19c517e20cb091ec2931a3  cryptomator-1.19.5-x86_64.AppImage
760bd64d85e956f1c0a5528e8b3e179a178074807415d44206d9c9a01161b19d  cryptomator-1.19.5-aarch64.AppImage

[!TIP] You can verify the GPG signature of all assets using our public key: 5811 7AFA 1F85 B3EE C154 677D 615D 449F E6E6 A235.