If I lock a folder containing a Word file, I can still read a file in the folder which appears in the Word Recent File list as http://cryptomator-vault:42427>>…… This doesn’t seem to be very secure.
Cryptomator is. It designed to secure your local data. It is designed to encrypt your online stored data.
Yes, if windows puts the opened file content in caches, these caches are not encrypted by Cryptomator.
If you want to have your local system encrypted, I recommend tools that are designed for that purpose. Like Veracrypt or bitlocker.
Thanks, Michael. Fortunately the drive is encrypted by BitLocker so the cache is protected.
Still it would be nice if when you lock the vault the cache goes away or becomes unavailable somehow.
I just asked chat GPT if it could write me a power shell script that would delete all of the Microsoft Office temporary files that are cashed and it created one for me so perhaps you could do the same and if need be adapted to your specific installation so that each time you exit from Microsoft Word you simply run this Powershell script and it will clean up all the temporary files so you don’t have to worry about people accessing data that should only be in the vault.
I can post the script or a link to the script if you are interested.
Thanks LeoW. Hopefully the app itself will eventually incorporate the functionality of the script that you describe. In the past I have used Cryptainer which does not leave loose cache files lying around.
These files are being left behind by Microsoft so there’s not much cryptomator can do about it.
That’s why I suggested creating a simple Powershell script that targets the default Microsoft cache directories.
It really doesn’t matter what file system cryptomator uses because it’s not cryptomator that’s leaving the files behind it’s Microsoft.
“Word Options → Save → Delete files from the Office Document Cache when they are closed” is another workaround…
1 Like