Cyberduck
An open-source file-transfer client for Windows and macOS that connects to FTP, SFTP, WebDAV, S3 and common cloud storage, with bookmarks, external editing and Cryptomator vault support.
What Cyberduck is useful for
Cyberduck offers one desktop interface for SFTP, WebDAV, object storage and several cloud services. Bookmarks, temporary-file uploads and external editors support practical publishing and maintenance tasks, while the credential store and remote path remain sensitive project data. It is a transfer client, not a replacement for backup versioning or deployment review.
Credentials, editing and encryption
The graphical client can use the operating system credential store, but a bookmark may still reveal the host, username and path. External editing downloads a temporary copy and can upload it whenever the editor saves. Cryptomator protection applies only inside a correctly unlocked vault; an ordinary remote folder is not encrypted by merely using Cyberduck.
Maintenance note
This page reviews Cyberduck 9.5.2, platform support, SFTP and WebDAV connections, object storage bookmarks, credential storage, temporary uploads, external editing and Cryptomator vault boundaries. Content review date: 2026-08-23.
Save to your cloud drive
Open the cloud drive to get the file directly, or save it for convenient access on another device.
Quark Cloud Drive
RecommendedSave Cyberduck to this cloud drive
Baidu Netdisk
Save Cyberduck to this cloud drive
Cyberduck 9.5.2 secure connection and transfer guide
Create a test SFTP or WebDAV bookmark with a limited account, verify upload and download behavior, then configure external editing or a Cryptomator vault only when needed.
Before you start
- Use Windows 10+ 64-bit or supported macOS and export only the bookmark settings that must be migrated.
- Prepare a test account and directory, prefer SFTP or TLS-protected protocols and avoid using a production root path for the first test.
- Decide whether passwords belong in the system keychain or credentials manager, and use separate team accounts where possible.
Installation steps
- 01
Install 9.5.2 for the platform
Install the Windows or macOS build, verify the version and review update and proxy settings before creating a remote bookmark.
- 02
Create a least-privilege bookmark
Choose the protocol, host, port, account and initial path; with SFTP, verify the host-key fingerprint before saving a private-key reference.
- 03
Test temporary-file uploads
Upload a small file into a test directory with temporary naming enabled, and confirm it is renamed only after transfer completes.
Quick start
- 01
Verify download and overwrite behavior
Download a test file, edit a local copy and upload under a new name before testing overwrite, timestamps, permissions and resume behavior.
- 02
Treat external editing as a remote write
Test an editor on a copy, inspect its temporary directory and enable version retention when a save could overwrite the only remote copy.
- 03
Test a Cryptomator vault
Create a vault only when client-side encryption is required, use a separate strong password, upload a test file, lock the vault and inspect remote names.
Usage tips
- Plain FTP can expose credentials and content; prefer SFTP or TLS-protected protocols unless a controlled compatibility case requires otherwise.
- Every external-editor save may upload a remote file, so use a staging path or version retention for configuration and code.
- A Cryptomator vault protects data only when the file is inside that vault; ordinary drag-and-drop into another bookmark has different semantics.
Troubleshooting and uninstall
Why can I connect but not upload or rename?
Check the remote path, account permissions, quota, object lock and filename rules in a test directory, then change only the smallest required permission.
Why is an externally edited file different from the local copy?
Stop further saves, recover a prior remote version or backup, and inspect the editor's temporary-file and upload-on-save behavior before trying again.
- Export required bookmarks and revoke credentialsKeep only bookmarks needed for migration, remove passwords and keys from the system credential store when appropriate, and close transfer queues.
- Remove cached and temporary dataQuit Cyberduck, uninstall it and review external-editor temporary files, downloads, logs and application data before clearing them.
Frequently asked questions
Which protocols can Cyberduck connect to?
Common connections include FTP, SFTP, WebDAV, S3 and several cloud storage services. Authentication and available operations still depend on the service and account.
Does Cyberduck encrypt every file uploaded to a remote bookmark?
No. Client-side encryption applies when using a correctly configured Cryptomator vault. A normal bookmark does not gain vault protection automatically.
Is an uploaded file automatically backed up?
No. Transfer success confirms delivery to the target, not version history or recoverability. Use the storage service's versioning or a separate backup plan.