App Protection

App protection prevents unauthorized access to Boxcryptor.

If this feature is activated, you can set several authentication methods. You have to authenticate yourself with a set method to use Boxcryptor.

You can enter an invalid authentication up to five times. If you fail to authenticate yourself, you will have to reset Boxcryptor to factory settings.

These are the authentication methods you can choose from:

  • 4-digit PIN code: When set, you have to enter a 4-digit PIN code.
  • Password: When set, you have to enter your Boxcryptor password.

If you have logged into Boxcryptor via Single Sign-on, no Boxcryptor password is set and the password authentication option is therefore not available.

Boxcryptor requires you to enter the authentication at start. Afterwards, Boxcryptor will run until you specifically quit the software. If you want to protect Boxcryptor when you are away from your device, please use your operating system’s features to lock your device manually or automatically after certain amount of time.

You can activate and set up the protection feature in the settings: Boxcryptor tray icon → Settings → Security.

Note: If an attacker gains access to your operating system, it is theoretically possible for him to modify the locally stored Boxcryptor settings in such a way that the protection feature can be circumvented. While this feature can help you better protect your encrypted data on your computer, it does not guarantee 100% security against sophisticated attackers with access to your operating system. We recommend to follow local device security best practices, to avoid such a situation.

Boxcryptor Settings

To access the Boxcryptor settings, right-click on the Boxcryptor icon located in the system tray and select Settings. Navigate to the Advanced tab to change the name of the Boxcryptor drive, its drive letter, autostart- and update settings, as well as filename encryption defaults.

The default settings are:

  • Start with Windows
  • Check for updates
  • Hide files and folders starting with a dot

Additionally, you can make the following changes to the Boxcryptor settings:

Changing these settings may cause unwanted behavior of Boxcryptor. Please do not change these unless you are an experienced user.

  • Enable Windows Search: Give the Window Indexing service access to the Boxcryptor drive. More about it can be found here.
  • Enable recycle bin: Deleting files will move them to trash, so that they can be restored if necessary.
  • Mount as fixed drive: Even though the Boxcryptor drive is a virtual drive, this option will make it look and treated as a real drive.
  • Mount for all users: System accounts will be able to access Boxcryptor.
  • Enable long path support (Windows 7, 8, 8.1 only): Enables working with paths longer than 256 characters. Careful: This might cause problems and errors with other applications.

Boxcryptor inherits the system-wide Enable win32 long paths setting shipped with Windows 10. Click here to learn how to enable it.

Long path support depends on the characteristics of the underlying file systems. Older files ystems such as FAT32 (commonly used for USB sticks) cannot benefit from this setting.

  • Mount in Windows Mount Manager: Adds the Boxcryptor drive to the Windows Mount Manager.
  • Hide files and folders starting with a dot: Those files are generally meant to be hidden. This is enforced by this option.
  • Hide files and folders with names that cannot be decrypted: If you cannot decrypt the names of the files and folders, you do not have access to them. Therefore, we hide them.
  • Hide OneDrive online file warning: Boxcryptor cannot handle OneDrive’s “on-demand” files. Enable this option to prevent warning messages from Boxcryptor when browsing folders with such files.
  • Auto detect removable drives: Automatically mount USB sticks or external storages as Boxcryptor locations.
  • Auto detect network drives: Automatically mount network drives as Boxcryptor locations.