File encryption is important, so only you and not a 3rd party can access your files. This applies on your computer, mobile phone, but even more so in the Cloud.
VeraCrypt is a free open-source disk encryption software for Windows, Mac OSX and Linux. You can create partitions which are encrypted, and are also able to encrypt your entire storage.
With Cryptomator, the key to your data is in your hands. Cryptomator encrypts your data quickly and easily. Afterwards you can upload them protected to your favorite cloud service.
Open-Source
Desktop
Picocrypt is a very small (hence Pico), very simple, yet very secure encryption tool that you can use to protect your files. It's designed to be the go-to tool for encryption, with a focus on security, simplicity, and reliability.
Picocrypt uses the secure XChaCha20 cipher and the Argon2id key derivation function to provide a high level of security, even from three-letter agencies like the NSA. It's designed for maximal security, making absolutely no compromises security-wise, and is built with Go's standard x/crypto modules.
Your privacy and security is under attack. Take it back with confidence by protecting your files with Picocrypt.
Store & access your files securely. DroidFS is an alternative way to use encrypted overlay file-systems on Android that uses its own internal file explorer instead of mounting virtual volumes. This allows you to store files in encrypted virtual volumes that other apps can't decrypt.
Currently, DroidFS supports only gocryptfs. This algorithm protects file contents and file names, but doesn't hide directory structure or file sizes.
FileVault is built-in to macOS, but you need to enable it. Have a look at our Apple macOS guide.
Cryptsetup is a utility used to conveniently set up disk encryption based on the DMCrypt kernel module.
These include plain dm-crypt volumes, LUKS volumes, loop-AES, TrueCrypt (including VeraCrypt extension) and BitLocker formats.
The project also includes a veritysetup utility used to conveniently set up the DMVerity block integrity checking kernel module and integritysetup to set up the DMIntegrity block integrity kernel module.
Open-Source
Linux
Hat.sh is a web app that provides secure local file encryption in the browser. It's fast, secure, and uses modern cryptographic algorithms with chunked AEAD stream encryption/decryption.
V2 of hat.sh introduced memory efficient in-browser large file chunked encryption using streams with libsodium.
Open-Source
Kryptor is free and open-source file encryption and signing software for Windows, Linux, and macOS.
It is a portable, cross-platform command line tool that makes use of modern and secure cryptographic algorithms. It aims to be a better and simpler, user-friendly alternative .
Tomb is a 100% free and open-source system for file encryption on GNU/Linux, facilitating the backup of secret files. Tomb is written in code that is easy to review and links commonly shared components.two-factor authentication
Tomb generates encrypted storage folders to be opened and closed using their associated keyfiles, which are also protected with a password chosen by the user.
A tomb is like a locked folder that can be safely transported and hidden in a filesystem; its keys can be kept separately, for instance , keeping the tomb file on your computer harddisk and the key files on a USB stick.
Tomb is a simple tool to manage encrypted storage on GNU/Linux, from the hashes of the dyne:bolic nesting mechanism.
Tomb works only on GNU/Linux systems.
GnuPG is a complete and free implementation of the OpenPGP standard as defined by RFC4880 (also known as PGP). GnuPG allows you to encrypt and sign your data and communications; it features a versatile key management system, along with access modules for all kinds of public key directories.
GnuPG, also known as GPG, is a command line tool with features for easy integration with other applications. A wealth of frontend applications and libraries are available. GnuPG also provides support for S/MIME and Secure Shell (ssh).
Since its introduction in 1997, GnuPG is Free Software (meaning that it respects your freedom). It can be freely used, modified and distributed under the terms of the GNU General Public License .
Desktop
OpenKeychain helps you communicate more privately and securely. It uses encryption to ensure that your messages can be read only by the people you send them to, others can send you messages that only you can read, and these messages can be digitally signed so the people getting them are sure who sent them.
OpenKeychain is based on the well established OpenPGP standard making encryption compatible across your devices and systems. For a list of compatible software for Windows, macOS, and other operating systems, consult openpgp.org/software/.
Wormhole lets you share files with end-to-end encryption and a link that automatically expires. So you can keep what you share private and make sure your stuff doesn't stay online forever.
Not Fully Open-Source
The source code for the streaming encryption implementation, based on Encrypted Content-Encoding for HTTP (RFC 8188) is open source. The full client and server code may be open sourced in the future.