- How to Create a Debug Log
- What is a FolderKey.bch?
- I Cannot Move a File to an Encrypted Folder
- This Application Requires a Java Runtime Environment
- USB Flash Drive Support
- Where can I download Boxcryptor Classic?
- What happens if Boxcryptor goes out of business?
- Advanced Client Configuration
- Outdated Clients
- Discontinued Amazon Cloud Drive Support
- Cannot open some files
- Known Limitations
FAQ & Troubleshooting
How to Create a Debug Log
What is a Debug Log?
A debug log captures all internal events while Boxcryptor is running. It can help us to track down issues with Boxcryptor, for example bugs and incompatibilities with other software.
Does a Debug Log Contain Sensitive Data?
When you create a debug log, sensitive user information - like password, encryption keys, or actual file content will not be logged.
Which Information Does a Debug Log Contain?
The debug log captures the following information.
- User interaction such as button clicks and in-app navigation
- File operations (including unencrypted filenames)
- Current Boxcryptor settings
- Communication with our servers and your cloud provider(s)
- System information such as OS version or required frameworks
How Do I Create a Debug Log?
If you experience problems before you can even sign in, you can enable a debug log via console:
- Open the terminal app.
- Drag the Boxcryptor Portable.app into this window.
--args -dat the end of the command-line and execute it.
- Open the command shell (Windows Key+R → type
- Drag the Boxcryptor Portable.exe into this window.
-dand run the application.
- Open the command shell (Windows Key+R → type
- Open Boxcryptor_Portable.sh with an editor.
./java -jar ../../"Boxcryptor_Portable.jar".
- Run Boxcryptor_Portable.sh with your terminal.
If you are already authenticated, you can enable Enable logging in the settings.
A debug log (
debug.seclog) is generated and saved to the following location:
- macOS: ~../Boxcryptor Portable.app/Contents/Java/.boxcryptor-internals/log/
- Windows and Linux: ../Boxcryptor_Portable/Boxcryptor/app/.boxcryptor-internals/log/debug.seclog
What Should I Do With my Debug Log?
After you enabled debug logging and reproduced your steps, you can send us an email with the debug log and a description what went wrong.
If you already have created a support case, you can simply enter the case number into the email body and we will automatically link your case.
What is a FolderKey.bch?
There is a File Called FolderKey.bch in my Cloud Storage. What is This?
Boxcryptor creates a FolderKey.bch file when a folder is encrypted. It contains encryption metadata for its parent folder and helps Boxcryptor to maintain the encryption hierarchy. This file is not visible within the Boxcryptor drive.
Does it Leak Sensitive Information?
The FolderKey.bch does not contain any sensitive information. Only .bc files contain sensitive information — and this only encrypted.
What Happens When I Lose it?
Dont't worry, you will not loose any data or access to files. All crypto-required information is stored directly within your encrypted *.bc files.
The downside of losing that file is that Boxcryptor no longer perceives the parent folder as encrypted. As a consequence, new files in this folder will not inherit the encryption properties.
I Cannot Move a File to an Encrypted Folder
Moving files between encrypted folders or into a new encrypted folder always requires encrypting the files with the new folder key. Hence, Boxcryptor has to download the item, decrypt, encrypt, and upload the item again. This would present an obvious strain on your bandwidth. Since users might no expect this much data usage for a simple move/copy operation, we decided to disable the option to move and copy between encrypted folders.
This Application Requires a Java Runtime Environment
If you receive this error message when starting Boxcryptor Portable, there is a problem with your folder structure in the downloaded Portable compressed-file.
Inside the compressed-file of the Portable you find the Boxcryptor Portable executable and - on Windows and Linux - a folder named Boxcryptor.
We put everything you need to run Boxcryptor Portable into that compressed-file – including a Java Runtime Environment. Please make sure that you did not modify the extracted items.
USB Flash Drive Support
If you want to run Boxcryptor Portable on a USB flash drive, please consider the following table. It contains serveral working combinations of platforms and file systems:
| | FAT32 | NTFS | HFS+ | | ------------- | ---------------------- | ----------------------------------------- | -------------------- | | Windows | YES | YES | YES (No Drag & Drop) | | macOS | YES (No Drag & Drop) | YES (No Drag & Drop, mount as read-write) | YES | | Linux | YES | YES | NO | | | | | |
Where can I download Boxcryptor Classic?
Boxcryptor Classic is the predecessor of Boxcryptor which has been discontinued. It is not recommended to use Boxcryptor Classic because it is not supported anymore and does not work on the latest operating system versions.
If you’re an existing user of Boxcryptor Classic you can download it here and we recommend you to upgrade to Boxcryptor as soon as possible.
Download Boxcryptor Classic Portable for Windows here: https://www.boxcryptor.com/download/BoxcryptorClassicPortable_1.6.402.92.zip Supports Windows XP, Windows 7, Windows 8.1 and may work on Windows 10
What happens if Boxcryptor goes out of business?
Boxcryptor has been designed in such a way that Boxcryptor continues to work even if the Boxcryptor servers are not available and you're still signed into Boxcryptor. If you want to take additional precautions for the event that the Boxcryptor servers would go permanently offline, you must have the following backups:
- Exported key file
- Boxcryptor installer file
When these files are available, you will always be able to access your encrypted files on your own on any supported operating system - without any connection to any server. The exported key file contains all encryption keys associated with your Boxcryptor account. Important: As new keys might be added over time by Boxcryptor's integrated key management (e.g. when sharing files with other Boxcryptor users), it is recommended to regularly export a new key file.
After installing Boxcryptor, you can use the exported key file to access your encrypted files using a local account. Learn more about exporting your keys and local accounts.
Advanced Client Configuration
Some preferences of Boxcryptor are not exposed in the user interface. While it is generally not recommended to modify these preferences, experienced users or administrators might want to do it to better tailor Boxcryptor to their needs.
We regularly release new versions of Boxcryptor with new features, better stability and overall improvements and retire outdated versions over time. On September 30 2018, the following versions have been retired:
- Boxcryptor for Windows 2.22.706 and older
- Boxcryptor for macOS 2.19.907 and older
When you try to use a retired version, you will not be able to use Boxcryptor and receive one of the following error messages:
This client is invalid or outdated. Please upgrade to the latest version.
The client id is invalid!
This is no secure connection
The remote certificate is invalid according to the validation procedure
Boxcryptor can't establish a secure connection to the Boxcryptor server.
Download and install the latest version of Boxcryptor from here. Afterwards you will be able to continue to use Boxcryptor.
If you still see the error message This is no secure connection, the problem lies elsewhere. Check out I Cannot Connect to the Boxcryptor Servers.
Why can't I use a retired version?
As an additional security feature, Boxcryptor uses certificate pinning to defend against man-in-the-middle-attacks. By accepting only specific SSL certificates, Boxcryptor clients verify that a secure connection to our servers can be established.
The SSL certificate pinned in retired versions will be replaced on October 7th. These versions do not accept the new SSL certificate and refuse to establish a secure connection to our servers.
I am using Windows XP or Mac OS X 10.11 or earlier
Current versions of Boxcryptor require Windows 7 and later or macOS 10.12 and later. As all earlier operating system versions are not supported by Apple or Microsoft anymore, we recommend affected users to update their operating system to a newer version as soon as possible in order to stay safe.
Using unsupported operation systems poses a huge security risk. You really have to update your operating system for security-related use.
I cannot update to the latest version
Note: If you are using Windows, please look into I Cannot Update or Uninstall Boxcryptor first.
If for any reason you cannot update to the latest version and can't access your encrypted files anymore, you have the following options:
Boxcryptor Portable does not require any installation and can be used to access and decrypt your encrypted files without administrator rights. Download Boxcryptor Portable here.
You can export your keys from our server and use a local account to sign in to your outdated Boxcryptor version without requiring a connection to our servers. Learn more here.
I cannot sign in due to too many connected devices
Discontinued Amazon Cloud Drive Support
On August 16, 2019, Amazon Cloud Drive discontinues their API support:
On August 16, 2019, Boxcryptor's integration to the Amazon Drive API will be discontinued. Customers of Amazon storage will continue to have access to their content through our first party applications for Amazon Photos and Amazon Drive. Please make arrangements to discontinue all traffic to the Amazon API before August 16, 2019.
From this point on, accessing your files on Amazon Cloud Drive will no longer work through our mobile Boxcryptor apps.
How to access your Amazon Cloud Drive files
- Open https://www.amazon.com/clouddrive on your computer.
- Select all relevant files / folders and click Download.
- Extract the archive to the the local file system.
- Sign-in to the web-app of your chosen new cloud provider and upload the files / folders.
- Add the chosen provider in Boxcryptor Portable as shown here.
Alternatively you can add the local folder as a custom location.
Cannot open some files
There may be situations where files appear to be inaccessible. This can have multiple reasons:
Boxcryptor Access Issues
On desktop some Applications or the file browser shows a message with
Invalid parameterwhen trying to open a file.
- Boxcryptor is eventually signed-in to a wrong account. → Check the account info in the Boxcryptor settings and compare it with the Boxcryptor permissions.
- The user has no Boxcryptor permissions on the file. → Make sure the user has physical access to the shared file, has Boxcryptor permissions correctly set and the latest permission changes of the file have been synced. Learn how to set permissions here.
Filesystem Permissions Issues
Files are read-only or "permission denied" is displayed. Change files system permissions so your user can (physically) access them.
"Bad padding" issues, empty physical files or inaccessible folders due to an empty
File open shows "Found invalid data while decoding" and the .bc file is empty.
Folder cannot be opened "Found invalid data while decoding." is displayed in the permission settings.
There has been an incompatibility with Dropbox in the past that could create "broken" content for smaller files because Dropbox did not sync the last file change.
- restore an older version of the corrupted file via the file history of your cloud storage provider.
- for folder issues, delete the empty
Folderkey.bchfile and re-encrypt the folder.
Boxcryptor Portable has limited support for editing files: Changes to files are not tracked automatically by the Boxcryptor Portable. If you open a file, change the content, and save it, Boxcryptor Portable cannot synchronize these changes. Instead, to edit a file, you must first store the file locally, for example on your desktop. After saving your changes, you can manually re-upload the file to your provider.
Limited Support for Cloud Providers with Enabled Two-factor Authentication (2FA)
Due to technical incompatibilities, adding cloud providers with 2FA enabled may not work as expected when using Boxcryptor Portable. To fix this, you can temporarily disable 2FA in the security settings of the cloud storage provider before linking it to Boxcryptor Portable.