Kryptor is a free, open-source file encryption and signing CLI for Windows, Linux, and macOS. It uses modern primitives via libsodium (XChaCha20-Poly1305, Argon2id, Ed25519) with no configuration options and encrypts file names optionally.
Reviewed by Marcus Holmberg
Kryptor
kryptor.co.uk No ratings yet. Be the first.
Rate Kryptor: No account needed
Threat level
Hardened
A hardened pick. Worth the effort once you have chosen to shrink your footprint on purpose. Enough for most people. Threat levels
Our take
Kryptor takes a principled stance on cryptographic agility by offering exactly one algorithm suite with no config knobs, which is how modern tools should work. The protocol is documented in enough detail to audit independently, and the encrypted output is indistinguishable from random, which limits metadata leakage. It is a solo-maintained project rather than a large community effort, so the pace of updates is unhurried. If you want a leaner, more modern alternative to GnuPG for file encryption and signing on the command line and you are not tied to the OpenPGP ecosystem, Kryptor is a thoughtful choice.
GitHub at a glance
samuel-lucas6/Kryptor
Stars
499
-1 this week
Last commit
1.5y ago
slowing
License
GPL-3.0
Latest release
v4.1.1
1.5y ago
Stars, last 35d
Website at a glance
kryptor.co.uk
B score 70
Solid website security headers
Graded by Mozilla HTTP Observatory, tested 4d ago
Inspect this site yourself
Measures the security configuration of the tool's own website, not the privacy of the product itself. A strong tool can still score low here.
Kryptor alternatives
PrivacyNotes Zero-knowledge notes, tasks, files, passwords and journal secured by a single 12-word recovery phrase, with no email or password required. The crypto core and database schema are published for audit. No subscription model.
7-Zip File archiver with a high compression ratio and built-in encryption functionality.
FileVault FileVault is the built-in full-disk encryption feature in macOS. On Macs with Apple silicon or a T2 chip, data is encrypted by hardware by default; enabling FileVault adds a login-password gate that prevents decryption without your credentials.
BitLocker BitLocker is the built-in full-disk encryption feature in Windows Pro, Enterprise, and Education editions. It encrypts the operating system drive and fixed data drives using AES-XTS, with optional TPM-backed pre-boot authentication.
VERNAM A free, fully client-side file encryptor that runs in your browser. Drop in any file, set or generate a passphrase, and it seals the result into its own .vrn format. Nothing is ever uploaded, and it works offline.
VeraCrypt It can create a virtual encrypted disk that works just like a regular disk but within a file. It can also encrypt a partition or the entire storage device with pre-boot…
Kryptor license, in plain English
GPL-3.0 Strong copyleft
Free to use and modify, but anything you distribute that is built on it must also be open under the same license.
Permits
- Commercial use
- Modification
- Distribution
- Patent use
- Private use
Requires
- Disclose source
- Same license
- State changes
- License and copyright notice
Does not provide
- Liability cover
- Warranty
Why it matters: Strong copyleft keeps every distributed version open. A vendor cannot fold this into a closed product and ship it without releasing their changes.
Plain-language summary of the project's license, not legal advice. Read the full text for the exact terms.
* Average ratings will show on this page once the threshold of 5 ratings is reached.