# File encryption privacy ratings

Tools that encrypt files and drives.

| Name | Grade | Jurisdiction | Description |
| --- | --- | --- | --- |
| [Picocrypt](https://privacyratings.com/file-encryption/picocrypt/) | A (100/100) | Unknown | Small open source file encryption tool for desktop that uses XChaCha20 and Argon2id, with optional keyfiles, Reed-Solomon error correction and plausible deniability. The original project is archived and no longer developed. |
| [gocryptfs](https://privacyratings.com/file-encryption/gocryptfs/) | A (90/100) | Unknown | Open source encrypted overlay filesystem that runs as a FUSE mount and stores each file as a separate encrypted file, suited to cloud-synced folders. Also has a reverse mode for encrypted backups. |
| [VeraCrypt](https://privacyratings.com/file-encryption/veracrypt/) | A (90/100) | Japan | Open source disk encryption for Windows, macOS and Linux. Creates encrypted file containers or encrypts whole partitions and system drives, and supports hidden volumes. |
| [7-Zip](https://privacyratings.com/file-encryption/7-zip/) | B (80/100) | Unknown | Open source file archiver with its own 7z format that can encrypt 7z and ZIP archives with AES-256, including file names in 7z archives. The full graphical app is for Windows, with a command-line version for Linux and macOS. |
| [AES Crypt](https://privacyratings.com/file-encryption/aes-crypt/) | B (80/100) | Unknown | Cross-platform file encryption tool that encrypts individual files with AES-256 using a password or key file. Available as a desktop app, command-line tool and Android app. |
| [age](https://privacyratings.com/file-encryption/age/) | B (80/100) | Unknown | Command-line file encryption tool and Go library that uses small explicit keys, has no config options and works with standard Unix pipes. |
| [CryptSetup](https://privacyratings.com/file-encryption/cryptsetup/) | B (80/100) | Unknown | Command-line utility for setting up Linux disk encryption with the dm-crypt kernel module. Supports LUKS, plain dm-crypt, TrueCrypt, VeraCrypt, BitLocker and FileVault2 volumes. |
| [Cryptomator](https://privacyratings.com/file-encryption/cryptomator/) | B (75/100) | Germany (Fourteen Eyes) | Client-side encryption for files stored in cloud services. Encrypts each file separately inside a vault so the files can sync individually. Available for desktop, Android and iOS. |
| [Kryptor](https://privacyratings.com/file-encryption/kryptor/) | C (65/100) | Unknown | Open source command-line tool for encrypting and signing files with a passphrase, symmetric key or public keys, using modern primitives with no configuration options. |
| [FileVault](https://privacyratings.com/file-encryption/filevault/) | D (45/100) | United States (Five Eyes) | Full-disk encryption built into macOS that encrypts the startup volume with XTS-AES-128. The recovery key can be kept locally or escrowed with an iCloud account or a device management server. |
| [DiskCryptor](https://privacyratings.com/file-encryption/diskcryptor/) | F (30/100) | Unknown | Open source partition and full-disk encryption for Windows, including system drives on UEFI/GPT machines. |
| [BitLocker](https://privacyratings.com/file-encryption/bitlocker/) | F (20/100) | United States (Five Eyes) | Full-volume encryption built into Windows Pro, Enterprise and Education editions. Protects fixed and removable drives, typically using the device TPM to hold keys. |

## Criteria

- **Open source** (weight 3): Is all the source code needed to run the product public?
- **No trackers or telemetry** (weight 3): Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
- **No ads or data sales** (weight 2): Is the product funded without advertising, ad targeting or selling user data?
- **Independent audit** (weight 2): Has an independent security or privacy audit been published within the last three years?

Source: https://privacyratings.com/file-encryption/