- Off-Migration Guide: Decrypt all Boxcryptor encrypted files
- What happens if Boxcryptor goes out of business?
- I Cannot Install Boxcryptor
- My Screen Goes Black on Install
- I Cannot Update or Uninstall Boxcryptor
- WebView2 Troubleshooting
- Boxcryptor is Using a Lot of CPU
- Boxcryptor is Slow
- Icons or the Context Menu are Not Shown
- How to Create a Debug Log
- Boxcryptor Crashes at Start
- I Cannot Connect to the Boxcryptor Servers
- Where can I download Boxcryptor Classic?
- Advanced Client Configuration
- Outdated Clients
- Cannot open some files
- How to use Windows Search / Cortana
- What is a FolderKey.bch and a .bclink file
- Incompatibility with Bitdefender
- Recover Account Access if Second Factor (2FA) is Lost
Share Access to Files
One of the main reasons to use cloud storage is how easy it is to share files and that one can simplify remote group work. Boxcryptor allows you to stay secure while collaborating and sharing files with others.
What You Need to Know About Sharing Encrypted Files
For understanding how the sharing of encrypted files works, it is helpful to understand how programs handle unencrypted and encrypted files.
If you store an unencrypted file on your device or in the cloud, the program you store it with saves the file and the information inside. Such a file can be read or modified by anyone who has physical access. If you encrypt a file, however, the information inside the file is modified. For programs and humans the encrypted information is rendered useless. To decrypt the information again, you need a cryptographic key that translates the information back into its original state.
Therefore, sharing an encrypted file with somebody is like writing an email by poking around on your keyboard. The other person can read the information, but it is useless, since it does not have any semantic meaning.
As a consequence, there are two steps necessary to share an encrypted file:
- Share the file physically at your cloud provider. Please check your provider’s documentation on how to share files or folders with others.
- Share the cryptographic key in Boxcryptor. Boxcryptor uses a key for each file. The key is encrypted by your Boxcryptor account and is stored within the file itself. If you share the file with somebody, the key will be encrypted with the Boxcryptor account of the receiver and stored in the file as well.
Note: Every time you share a file, the file is modified. Keep in mind that it must be synchronized by your cloud provider. If you share access to multiple files, make sure that they are all synchronized completely.
Just as the inheritance of encryption properties, permissions are inherited from the parent folder as well. If you add a file to a shared folder, the persons who you shared the folder with can access the file now, too.
Encrypted and permission to access for Alice
Encrypted and permission to access for Bob
Encrypted and permission to access for Alice and Bob
Share Files With Boxcryptor Users: Permissions
Using Boxcryptor, you can share encrypted files or folders with other Boxcryptor users.
It is recommended, to not directly share an encrypted folder but rather place the encrypted folder in an unencrypted parent folder and share the unencrypted parent folder - especially when using filename encryption.
New files or folders (recommended)
- Create a new unencrypted parent folder.
- Create a new encrypted folder in the parent folder.
- Right-click the file or folder → Boxcryptor → Manage Permissions.
- Add the groups or users you want to share the file or folder with and apply the changes.
- Copy the new files to the encrypted folder.
- Share the unencrypted parent folder in your cloud provider.
Existing unencrypted files or folders
- Create a new unencrypted parent folder.
- Create a new encrypted folder in the parent folder.
- Right-click the encrypted folder → Boxcryptor → Manage Permissions.
- Add the groups or users you want to share the file or folder with and apply the changes.
- Copy the existing unencrypted files to the encrypted folder.
- Delete the existing unencrypted files.
- Share the unencrypted parent folder in your cloud provider.
Existing encrypted folders
- Create a new unencrypted parent folder.
- Move the encrypted folder to the parent folder.
- Wait until the changes have been synced by your cloud provider.
- Right-click the encrypted folder → Boxcryptor → Manage Permissions.
- Add the groups or users you want to share the file or folder with and apply the changes.
- Wait until the changes have been synced by your cloud provider.
- Share the unencrypted parent folder in your cloud provider.
It is recommended to use groups in permission management as they can reduce the need for synchronization by your cloud provider when granting or revoking access to individual users. See Benefits of Groups for more information.
Manage Groups
Groups are a powerful instrument for managing your users and their access rights. Manage your groups in your account when you sign in on our website here.
Please be aware that the group feature is only availabe with Boxcryptor Business and up.
Irreversible operations, such as rename, delete, or grant and revoke ownership are restricted to the owner of the group. You can set other members as owners and also remove ownership. Groups can have multiple owners.
Benefits of Groups
Besides sharing files with individual accounts, you can also share files with a group of users. If you share a file with a group, the cryptographic key will be encrypted with a group key and stored inside the file.
The benefits of groups are:
- Central management: You do not need to click through all your files to see, revoke, or grant access to somebody.
- No synchronization necessary: When you add or remove someone from a group, the changes are done on your machine and our servers only. Therefore it is much faster. Since the permissions within the files do not change, a consecutive file synchronization is not necessary.