FAQ & Troubleshooting
What is a FolderKey.bch?
There is a File Called FolderKey.bch in my Cloud Storage. What is This?
Boxcryptor creates a FolderKey.bch file when a folder is encrypted. It contains encryption metadata for its parent folder and helps Boxcryptor to maintain the encryption hierarchy. This file is not visible within the Boxcryptor drive.
Does it Leak Sensitive Information?
No. All sensitive data within the file is securely encrypted.
What Happens When I Lose it?
Dont't worry, you will not loose any data or access to files. All crypto-required information is stored directly within your encrypted *.bc files.
The downside of losing that file is that Boxcryptor no longer perceives the parent folder as encrypted. As a consequence, new files in this folder will not inherit the encryption properties.
I Cannot Connect to the Boxcryptor Servers
Boxcryptor uses the proxy configuration provided by the Android system.
Help can be found here at Advanced Network Settings → Proxy.
Use self-signed Certificates for Cloud Provider
Connecting to self hosted WebDAV or Owncloud / NextCloud instances with self-signed certificates does not always work out-of-the-box.
For Boxcryptor to connect to your server, you must install your self-signed certificate as a user certificate on your Android device. For more information, please see here.
For self-signed certificates, the following configuration entry is required at creation to be accepted as a valid root CA:
If you own the domain, you can instead create a free and trusted certificate. For more information, see Authorities such as Let's Encrypt.
I Cannot Move a File to an Encrypted Folder
Moving files between encrypted folders or into a new encrypted folder always requires encrypting the files with the new folder key. Hence, Boxcryptor has to download the item, decrypt, encrypt, and upload the item again. This would present an obvious strain on your bandwidth. Since users might no expect this much data usage for a simple move/copy operation, we decided to disable the option to move and copy between encrypted folders.
Camera Upload is Not Working
If Camera Upload is not working even if the How to upload and When to upload Requirements have been fulfilled, please try the following:
- Force quit: Do not force quit Boxcryptor using an app manager or the Android app settings, as this will also force quit any background detection. Just restart Boxcryptor to enable background detection again.
- Battery saver: If the Android Battery Saver mode is enabled, any background detection is blocked. You can start Boxcryptor to bring it to the foreground so that the detection can run, or just disable the Android Battery Saver mode.
- Battery optimization: Android automatically battery optimizes any installed app. But this may cause issues if a process - like detecting photos or videos - must run in the background. You can whitelist Boxcryptor from battery optimization by heading to the Android settings → battery → (//images.ctfassets.net/9ijwdiuuvngh/6CBtlTey5iKU2aUMmIcKwS/833804315b9fb68685a9a10037ec654a/inline_Help_More_Vertical.svg) → battery optimization → all apps__. Scroll to Boxcryptor, and select “Do not optimize”.
- Restart Boxcryptor: In some cases it is sufficient to restart Boxcryptor. Swipe away Boxcryptor from the Android recent apps screen and start Boxcryptor again so that the Camera Upload detection is started.
Where can I download Boxcryptor Classic?
Boxcryptor Classic is the predecessor of Boxcryptor which has been discontinued. It is not recommended to use Boxcryptor Classic because it is not supported anymore and does not work on the latest operating system versions.
If you're an existing user of Boxcryptor Classic you can download it here and we recommend you to upgrade to Boxcryptor as soon as possible.
Boxcryptor Classic for Android is not available in Google Play anymore but can be downloaded it here: https://www.boxcryptor.com/download/Boxcryptor_Classic_v1.5.4_Android.apk Supports Android 2.1, 3, 4
What happens if Boxcryptor goes out of business?
Boxcryptor has been designed in such a way that Boxcryptor continues to work even if the Boxcryptor servers are not available and you're still signed into Boxcryptor. If you want to take additional precautions for the event that the Boxcryptor servers would go permanently offline, you must have the following backups:
- Exported key file
- Boxcryptor installer file
When these files are available, you will always be able to access your encrypted files on your own on any supported operating system - without any connection to any server. The exported key file contains all encryption keys associated with your Boxcryptor account. Important: As new keys might be added over time by Boxcryptor's integrated key management (e.g. when sharing files with other Boxcryptor users), it is recommended to regularly export a new key file.
After installing Boxcryptor, you can use the exported key file to access your encrypted files using a local account. Learn more about exporting your keys and local accounts.
We regularly release new versions of Boxcryptor with new features, better stability and overall improvements and retire outdated versions over time. On September 30 2018, the following versions have been retired:
- Boxcryptor for Windows 2.22.706 and older
- Boxcryptor for macOS 2.19.907 and older
When you try to use a retired version, you will not be able to use Boxcryptor and receive one of the following error messages:
This client is invalid or outdated. Please upgrade to the latest version.
The client id is invalid!
This is no secure connection
The remote certificate is invalid according to the validation procedure
Boxcryptor can't establish a secure connection to the Boxcryptor server.
Download and install the latest version of Boxcryptor from here. Afterwards you will be able to continue to use Boxcryptor.
If you still see the error message This is no secure connection, the problem lies elsewhere. Check out I Cannot Connect to the Boxcryptor Servers.
Why can't I use a retired version?
As an additional security feature, Boxcryptor uses certificate pinning to defend against man-in-the-middle-attacks. By accepting only specific SSL certificates, Boxcryptor clients verify that a secure connection to our servers can be established.
The SSL certificate pinned in retired versions will be replaced on October 7th. These versions do not accept the new SSL certificate and refuse to establish a secure connection to our servers.
I am using Windows XP or Mac OS X 10.10 or earlier
Current versions of Boxcryptor require Windows 7 and later or macOS 10.11 and later. As all earlier operating system versions are not supported by Apple or Microsoft anymore, we recommend affected users to update their operating system to a newer version as soon as possible in order to stay safe.
Using unsupported operation systems poses a huge security risk. You really have to update your operating system for security-related use.
I cannot update to the latest version
Note: If you are using Windows, please look into I Cannot Update or Uninstall Boxcryptor first.
If for any reason you cannot update to the latest version and can't access your encrypted files anymore, you have the following options:
Boxcryptor Portable does not require any installation and can be used to access and decrypt your encrypted files without administrator rights. Download Boxcryptor Portable here.
You can export your keys from our server and use a local account to sign in to your outdated Boxcryptor version without requiring a connection to our servers. Learn more here.
I cannot sign in due to too many connected devices