How does Cryptomator compare to the personal vault on Onedrive?
Thinking about it, Onedrive is not a very good place for a Cryptomator vault because it syncs both ways.
If my vault files were deleted or damaged on my local onedrive folder on my pc I’d have no backup because this would be reflected online.
Likewise, if the online cloud vault files were deleted or became corrupted, they would also be deleted or corrupted versions placed in my local onedrive folder. So again I’d lose everything.
As I see it, another backup is required, as a backup of the backup and the simplicity of using onedrive as a backup starts to get out of hand. May as well go back to the 321 backup method.
OneDrive Personal Vault: Encryption done by Microsoft (you have to decide if you trust them to not have a key somewhere and a strong encryption). Encryption done when files are already uploaded (!). Limited to 3 files if you do not have a priced plan.
Cryptomator: Encryption done by Cryptomator (open source, no backdoors). Encryption done local before the files are transferred to online storage. No limitations.
That’s exactly what Cryptomator was designed for. Why would it not be a good place for a vault? The 2-way sync does work perfectly with cryptomator vaults.
Cryptomator covers data privacy issues. It is not a backup tool and does not replace a solid backup strategy. I recommend a 3-2-1 backup (as you already mentioned). That would also cover your szenario. No matter which encryption tool you use. Please do not consider any “on the fly” synced copy of your files as a backup, if you only have these 2 files in total. As you already noticed, both files would be destroyed if one of them is corrupted. I reccomend to have least one backup process which keeps the “old” files as a history (I have 5 history files).
Thanks for explaining the difference in Cryptomator and Onedrive Personal Vault. I wasn’t aware Onedrive Vault transferred files unencrypted. I’ll stick with Cryptomator.