Secure Key Management

[Michael]

Hi. If you save your vault password (settings advanced unlock options), your password is stored in your systems keychain.
https://docs.cryptomator.org/en/latest/desktop/access-vault/#unlock-a-vault

The Masterkey file is always stored in the root folder of your vault.

Why is the masterkey stored in the cloud?

Inside the storage location of a Cryptomator vault, you will find a file called masterkey.cryptomator. This file is stored in the cloud to allow convenient access to a vault on different devices. What does this file contain? This file contains encrypted data, which is needed to derive the masterkey from your password. The file does not contain the decrypted masterkey itself. In addition, some metadata about the vault (e.g., the version of Cryptomator used to create it) is also stored in this fi…

If you are afraid to loose your Masterkey file and it’s backup file in your cloud storage and your local files, feel free to make additional backups of the Masterkey file wherever you want.
Please keep in mind that the Masterkey file changes every time you either change the password of your vault or make a Cryptomator app update that contains a vault format upgrade.