This guide explains how to connect LRZ Sync+Share with the BoxCryptor Classic encryption tool and get additional security by end-to-end encryption (E2EE). Files encrypted with end-to-end encryption can be viewed on the computer desktop, netbook, iPhone, iPad and Android devices. Disadvantage: The documents cannot be read in the web portal, because it is not possible to decrypt files via the web browser. Note: It is possible to select specific folders to be encoded using end-to-end encryption, while the remaining folders are protected by the standard security measures.
End-to-end encryption is recommended for folders with content that requires special protection.
To view these contents, an additional password is required for decryption. But even without end-to-end encryption, files are encrypted in LRZ Sync+Share before they leave the client. LRZ Sync+Share uses commercial security standards (AES, RSE, SHA).
You can also share encrypted folders with other LRZ Sync+Share users. To do so, you need to send the decryption password to the desired users over a secure connection.
An installation of the LRZ Sync+Share client.
One installation of the BoxCryptor (download and install). You can work with a free, private and an unlimited professional edition. Please note the license terms.
Settings for Windows
On your computer/laptop:
Open BoxCryptor and the "Welcome to BoxCryptor" wizard will open.
Select the function "Create new BoxCryptor Classic Folder". Click Next.
Select "User" Storage Space. Click Browse.
Select the previously created folder. Click Next.
Select a drive letter. Click on Next.
Set a secure decryption password. Note: Encryption is severely limited if you choose an insecure password.
Click on Next. You are ready!
Click on Finish. The drive letter will open in Windows Explorer afterwards. Now you can copy files into it.
You can now access the encrypted folder from all your computers and mobile devices.
Verwenden Sie immer diesen Laufwerksbuchstaben, wenn Sie auf Dateien zugreifen, Änderungen vornehmen oder Dateien löschen. Nur Dateien, die sich im Laufwerksbuchstaben befinden, werden ausreichend von BoxCryptor verschlüsselt. Sie können diese Ordner auch mit weiteren LRZ Sync+Share Nutzern teilen. Dazu müssen Sie das Entschlüsselungspasswort über eine sichere Verbindung an die gewünschten Nutzer schicken. Beachten Sie: Die Verschlüsselung wird gravierend eingeschränkt, wenn Sie das Entschlüsselungspasswort über eine unsichere Verbindung weiterleiten.
Always use this drive letter when accessing files, making changes or deleting files. Only files that are located in the drive letter are sufficiently encrypted by BoxCryptor. You can also share these folders with other LRZ Sync+Share users. To do so, you need to send the decryption password to the desired users via a secure connection. Note: The encryption is severely limited if you forward the decryption password over an insecure connection.
To access a folder that you have previously encrypted or to which you have been invited, you have to follow these instructions:
Select the folder you want to open.
Select "User" Disk space. Click "Browse".
Browse the folder you created earlier and select "BoxCryptor Classic". Click Next.
Select a drive letter. Click on Next. You will be prompted to enter the decryption password.
Enter the decryption password and confirm with Ok.
Settings for Android
Install and launch the LRZ Sync+Share mobile app for Android.
Log in via your LRZ Sync+Share account.
Select the encrypted folder from the list.
Open the context menu and select "Download". This will download all (new) files.
Install and start the BoxCryptor Handy App for Android.
Select "Connect to local storage". Select "Built-in memory".
Browse and select "LRZ Sync+Share".
Select the encrypted folder and then select "BoxCryptor Classic". You will be prompted to enter the decryption password.
Enter the decryption password and confirm with OK.
You now have access to the files contained in the encrypted folder and can browse the folder.
Files are stored (in idle state) encrypted on your Android device. They are also accessible offline. To update the files on your device, repeat steps 2-4.
Settings on the iPhone and iPad
Make sure that you can receive e-mail on your iOS device.
Select the encrypted folder.
Click Settings on the menu bar.
Copy the "WebDAV URL" of the encrypted folder.
Compose an email with the WebDAV URL and send it to yourself.
On your device, open the recently received emails.
Copy the WebDAV URL from the e-mail by clicking and holding on the text. Then select Copy.
Install and launch the BoxCryptor App for iOS.
Select the cloud provider.
Select WebDAV URL.
Select the Custom service.
Paste the WebDAV URL that you previously copied from your email.
Enter the data for your LRZ Sync+Share account. Press Login.
Select "BoxCryptor Classic". You will be prompted to enter the decryption password.
Enter the decryption password. Click Done.
You can now access and browse files in the encrypted folder.
The files are not stored on your iOS device. An online connection is required to access the encrypted files.
- FAQ 101: Who is allowed to use LRZ Sync+Share and how can I login?
- Sync+Share security recommendations