Clavis vs Cryptomator vs AxCrypt vs BitLocker: which file encryption should you use?
"Encryption" covers very different jobs. BitLocker protects a lost laptop; Cryptomator protects a cloud folder; AxCrypt and Clavis protect individual files. Here's an honest comparison, including where Clavis is not the best choice.
| BitLocker | Cryptomator | AxCrypt | Clavis | |
|---|---|---|---|---|
| Protects | Whole drive, when the PC is off | A vault folder (often in the cloud) | Individual files | Individual files and folders |
| Works by | Encrypting the disk | Mounting the vault as a drive | Encrypting files in place | Encrypting files in place (random names) |
| Platforms | Windows Pro/Enterprise (Home has "device encryption") | Windows, macOS, Linux, mobile | Windows, macOS, mobile | Windows, Linux |
| Source | Closed | Open source | Closed | Closed (standard, public algorithms) |
| Account needed | Microsoft account for key backup (optional) | No | Yes | No |
| Sharing with others | — | Share the vault password | With other AxCrypt users | Public-key, no password shared |
BitLocker: turn it on, but it's not file encryption
If your Windows edition has BitLocker or device encryption, use it. It's the right protection for a lost or stolen laptop. But once Windows is running, every file is readable as normal — by you, by malware, by anyone at your desk — and a file you copy to a USB stick or email is not encrypted at all.
Cryptomator: great for a cloud vault
Cryptomator is open source and well regarded. It keeps an encrypted vault inside your cloud folder and shows it as a virtual drive while unlocked. Choose it if you want to work on files inside a vault all day and you want open source. It's less suited to encrypting a file here and there, or sending one to someone.
AxCrypt: file encryption with an account
AxCrypt encrypts individual files and integrates with Explorer. It's account-based, and its stronger features are part of a subscription.
Clavis: file encryption without an account or subscription
Clavis encrypts files and folders in place with AES-256-GCM and Argon2id, gives encrypted files random names, and works from the Explorer right-click menu. No account, nothing uploaded. Free covers everyday encryption; Pro and Premium are one-time purchases that add watch folders, notes, several vaults, encrypt-to-cloud, public-key sharing, backups, version history and a command line.
Where Clavis isn't the best fit: it's closed source and hasn't been independently audited yet; there's no macOS or mobile version; and it isn't full-disk encryption — use BitLocker (or LUKS on Linux) for that, alongside it.
The short answer
- Laptop protection: BitLocker / device encryption. Everyone should have it on.
- An open-source vault in your cloud: Cryptomator.
- Encrypting, sharing and backing up individual files on Windows or Linux, without an account: Clavis.
See also: A simpler VeraCrypt alternative for everyday files.