Encrypting Files on GreenAnt nest is possible using client-side encryption.

To be accessible form the web interface, files are not encrypted on the server by default (encryption at rest). However, you can use client-side encryption if you want an extra layer of protection for your files (for example with encFS. GreenAnt also supplies a fully encrypted storage system called GreenAnt GCrypt. Please contact us if you need advice regarding file encryption, we'll be happy to recommend solutions which fit your use case.

Table of Contents

Using encFS

encFS allows you to create an encrypted storage for your files that can only be decrypted using a locally stored password. It's important you don't lose this password, as there is no way to recover it. We recommend using a password storage application like KeepassX to store your passwords.

  • Strengths of encFS
    • ease of use, works file-by-file
    • compatible with cloud storage
    • strong encryption
    • client-side
  • Weaknesses of encFS
    • vulnerable if multiple versions of files kept (we recommend clearing old versions of important files)
    • does not hide the folder structure (but does encrypt file names)
  • Alternatives to encFS
    • for users requiring a higher level of security, we recommend our advanced product GreenAnt GCrypt

Installation

encFS is a program designed to be run from the console but there are also helper GUIs for most platforms. The install instructions below show how to install the command and a GUI.

OS X

encFS can be installed using a variety of package managers on OS X.

Option 1: Homebrew

  • first install Homebrew

  • then run this command from the Terminal

brew install encfs

Option 2: MacPorts

  • first install MacPorts

  • then run this command from the Terminal

sudo port install encfs

GUI

  1. Download
  • download prebuilt .DMG EncFSGUI here
  • or build yourself from this repository
  1. Open the dmg file and drag “encfsgui.app” into your Applications folder.
  2. You may encounter an "unidentifed developer" warning when you open the application. This can be fixed by opening System Preferences and going to the Security and Privacy section. In the General pane, click Open Anyway to grant permission for EncFSGui to run.
  3. for further instructions, see these help docs
  • https://www.maketecheasier.com/mount-encrypted-folder-mac-os-x-encfsgui/
  • https://www.maketecheasier.com/install-encfs-mac/

Linux

sudo apt-get update
sudo apt-get install encfs

GUI

Ubuntu:

sudo add-apt-repository ppa:gencfsm
sudo apt-get update
sudo apt-get install gnome-encfs-manager

Debian:

  • https://packages.debian.org/wheezy/admin/cryptkeeper
sudo apt-get install cryptseeker

Windows

Tools such as encryption can often be more difficult to use on Windows systems. There are a number of ports of encFS to windows although some have not been updated for some time.