Security of the files

[Michael]

@hmmm

If its just so easy to make new vault, use its master key for anyother vault and then (if have recovery key) can reset password, doesnt feel very reassuring! i was hoping that each vault has unique master key tho. Which brings to my another concern,

You can’t use a Masterkey file of vault A to reset the password of vault B. The Masterkey file is specific for each vault. If you try to use a masterkey file with another vault and perform a password reset, the vault will be shown as empty as the files cannot be decrypted.

@hmmm

why save master key in folder with my encrypted files?

Why is the masterkey stored in the cloud?

Inside the storage location of a Cryptomator vault, you will find a file called masterkey.cryptomator. This file is stored in the cloud to allow convenient access to a vault on different devices. What does this file contain? This file contains encrypted data, which is needed to derive the masterkey from your password. The file does not contain the decrypted masterkey itself. In addition, some metadata about the vault (e.g., the version of Cryptomator used to create it) is also stored in this fi…

@hmmm

it just takes another person to have cryptomator and a brute force method or sth to identify my password,

There are functions to obstruct bruteforce

Master password entropy

@overheadhunter did a little math on how much time and/or energy and invest is actually needed to bruteforce a vault protected with a 12 digit password. His post in is in German. The result of his math was: either round about 1.2 quadrillion years of time or 46 billion euro together with round about 32 Gigawatt of energy and 1 Year of time. (with some assumptions and exclusions) I think this gives a pretty good idea what can be done with a 12 character password Here’s the link: Master-Key i…

@hmmm

so the whole security is as strong as my password?

Yes. This is the case with any encryption, no matter which kind of encryption. A weak password will lead to a weak encryption.