Most cloud drives can read your files on their own servers. OurClone's encrypted vault, built on rclone crypt, adds a password-only encryption layer in front of any remote you've connected — Google Drive, Dropbox, S3-compatible storage, WebDAV, and more — so only you can make sense of what's stored there.
Add a password-only layer to any cloud you already use
An encrypted vault is a special remote that wraps another connected cloud storage. Once set up, anything you send into the vault is encrypted locally by OurClone before it ever reaches the provider — so Google Drive, Dropbox, S3-compatible storage, or any other connected remote only ever sees ciphertext, not your files.
This is useful even on providers that already encrypt data at rest on their end, because the encryption key never leaves your device.
How it's set up
- Choose the base cloud storage the vault will live inside (any remote you've already connected).
- Pick a subfolder for the encrypted data — defaults to
encrypted, but you can rename it. - Set a vault password. This password is the only key — OurClone does not store a recovery copy of it.
- Once created, the vault behaves like a normal remote: use it for transfers, sync, mounting, or as a backup destination.
A vault cannot be created on top of another vault — pick a plain cloud remote as the base.
Your password is the only key
Encryption and decryption both happen on your device. If you lose the vault password, the data inside cannot be recovered by OurClone or anyone else — there is no backdoor. Keep it in a password manager, the same way you would a backup repository password.
Frequently asked questions
Is the encrypted vault free?
No, it's a Pro feature. See pricing for plan details.
Which cloud providers can I use as the base?
Any remote you can already connect in OurClone — cloud drives, S3-compatible object storage, WebDAV, SFTP, and NAS shares all work as a vault's base storage.
Can I nest one vault inside another?
No. A vault must be built directly on a plain cloud remote, not on top of another vault.
What happens if I forget the password?
The data becomes permanently unreadable. There is no password reset for vault contents — this is what makes the encryption meaningful.
An encrypted vault turns any connected cloud into a private, password-protected space: pick a base remote, choose a folder, set a password, and OurClone encrypts everything before it leaves your computer. Lose the password and the data is unrecoverable — that's the trade-off for real protection. This is a Pro feature.
Try this workflow in OurClone
Connect your clouds, run local transfers, mount remote folders, and create encrypted restic backups from one desktop app.