Cyberduck
Server and cloud storage browser
Install with Homebrew
brew install --cask cyberduck
Cyberduck — Official Website
Quick Take: Cyberduck
Cyberduck remains the default free multi-protocol storage browser on Mac in August 2026, with fresh 9.5.3 builds and wide cloud support. Pay Panic if you want luxury UX daily. Keep Cyberduck when budget and protocol breadth matter more, and keep duck CLI or rclone ready for unattended bulk.
Best For
- •Freelancers deploying via SFTP
- •Multi-cloud object storage browsing
- •Teams needing a free standard GUI
What is Cyberduck?
Cyberduck is a free file and cloud storage browser for Mac and Windows. It puts FTP, SFTP, WebDAV, Amazon S3, Backblaze B2, Azure, Google Drive, Dropbox, OneDrive, OpenStack Swift, and other endpoints in one bookmark list. The app is open source and donationware. You can use every feature without paying. A registration key for about $10, or a Mac App Store purchase, just removes the donation prompt at quit. That pricing model has stayed simple: the prompt is optional friction, not a feature wall. In early August 2026 the current download is Cyberduck 9.5.3, dated 4 August 2026 on cyberduck.io/download, listed for macOS 10.13 and later on Intel 64-bit and Apple Silicon. Mountain Duck, which mounts storage in Finder, and the free duck CLI remain companion products. Cryptomator vault support is still the reason some teams choose it for encrypted storage on ordinary clouds. If you need a GUI that reaches heterogeneous customer storage without buying a seat for every protocol, this is the usual default. If you compare options, Panic Transmit sells a more polished Mac experience, FileZilla and ForkLift cover the middle ground, and rclone wins for headless sync. Cyberduck's place is breadth at no license cost, a sensible pick for freelancers and IT generalists who need many protocols without buying Transmit for occasional SFTP. Use the GUI for interactive browsing and small moves; hand unattended bulk work to duck CLI or rclone so the windowed client does not become a bottleneck on multi-gigabyte jobs. On Mac, install via Homebrew cask or the official zip, create bookmarks with clear environment names, and prefer SSH keys for SFTP over passwords. Store secrets in the macOS keychain rather than spreadsheets. Document S3-compatible connection profiles so on-call can reproduce endpoints without guessing regions. Pin the app version in team setup docs if surprise upgrades mid-client job are a risk.
Closer look at Cyberduck on Mac
Cyberduck works best as the interactive layer. Browse with it, do small moves, and inspect prefixes. Then switch to duck CLI or rclone for unattended bulk. Store credentials in the macOS keychain, prefer SSH keys for SFTP, and stick to encrypted protocols on untrusted networks. Throttle transfers when you share a link, and set a plain-text editor for remote edits. Document which profiles you use for S3-compatible endpoints so on-call can reproduce them without guessing. Name bookmarks with environment and region. Test list, upload, and delete on a sample bucket before production credentials go in. If Cryptomator vaults are part of the workflow, treat passphrase recovery as a first-class runbook item, not an afterthought.
Ecosystem & Integrations
Decide where Cyberduck stops and CLI sync begins. The GUI is for discovery, ad-hoc moves, and verifying paths. duck CLI and rclone own scheduled sync, CI, and multi-hour transfers. Mountain Duck is optional when people insist on Finder mounts; document that path separately so support does not confuse browser and mount tools.
Future Development
Track 9.5.x notes for protocol fixes you rely on. Pin the cask or DMG version in rollout docs when client work cannot absorb a surprise upgrade. Copy bookmarks and connection profiles before you update so you can restore defaults if a release changes behavior.
Key Features
Multi-protocol browser
Handle FTP, SFTP, WebDAV, and major cloud drives from one bookmark list. Amazon S3, Backblaze B2, Azure, Google Drive, Dropbox, OneDrive, and OpenStack Swift sit beside classic server protocols, which is the core reason generalists keep Cyberduck installed.
Cryptomator vault support
Client-side encrypted vaults for sensitive data on otherwise ordinary cloud storage. Document vault passphrases offline; lost keys mean lost data. Useful when compliance wants encryption without a dedicated encrypted bucket product.
Transfer queue & resume
Queue uploads and downloads and resume with retries for large deploys. Use the transfer window to verify at least one file landed correctly before you call a site deploy done. For bulk multi-hour jobs, still prefer CLI tools once the GUI has confirmed the target prefix.
Integration with system keychain
Save passwords in the macOS keychain rather than scattered text files. Note which keychain entry matches each bookmark so Mac migrations do not leave you hunting secrets. Avoid keeping a shared spreadsheet of SFTP passwords that anyone can forward.
Connection profiles
Prebuilt profiles for popular providers reduce manual endpoint fiddling. For S3-compatible storage, pick the profile or a custom endpoint, save region once, and name bookmarks with environment and region so writes do not hit the wrong bucket.
duck CLI
Script transfers and listings in CI or remote sessions with the free CLI tool at duck.sh. Share a one-page list of list, upload, and sync commands so people can leave the GUI without searching docs mid-incident.
Mountain Duck companion
Optional adjacent app mounts remote storage in Finder for drag-and-drop workflows. It is a separate product with its own licensing from the same makers. Document mount points alongside Cyberduck bookmarks if support staff need to follow the same steps.
Open source transparency
Inspect and build from source; licensing aligns with free-software expectations. Donation keys and the Mac App Store purchase fund ongoing multi-protocol maintenance without locking features behind a paywall.
Who Should Use Cyberduck?
1Web freelancers
SFTP deploy static sites and inspect remote logs without memorizing lftp flags. Bookmark each client host with a clear name, prefer SSH keys, and use the transfer queue for release day uploads. Keep a local copy of what was delivered so recovery does not depend on the remote server alone.
2Data engineer
Browse S3/B2 prefixes, move sample objects, then hand off bulk sync to duck CLI or rclone. Connection profiles and named bookmarks reduce endpoint mistakes when multiple regions and accounts are in play.
3IT admin
Support staff with one GUI that reaches heterogeneous customer storage systems. Export a shared bookmarks file so new hires import hosts and buckets instead of retyping them. Budget about $10 per seat if the donation prompt distracts people during remote sessions.
Install Cyberduck on Mac
Direct download from cyberduck.io or Homebrew cask. The Mac App Store edition is paid and removes prompts via Apple billing. Version 9.5.3 (4 August 2026) targets macOS 10.13+ on Intel 64-bit and Apple Silicon.
Download or brew
brew install --cask cyberduck or grab the zip from cyberduck.io/download.
Create a bookmark
Pick protocol/provider, enter host and credentials, save bookmark. Include environment and region in the name (for example prod eu-central S3).
Optional registration
Donate ≥ $10 for a key, or buy the App Store build, if you want the quit-time donation prompt gone. Core features stay available either way.
Pro Tips
- • Prefer SSH keys for SFTP over passwords.
- • Enable transfers over encrypted protocols only on untrusted networks.
- • Use connection profiles for S3-compatible endpoints.
- • Copy bookmarks and profiles before major upgrades so defaults can be restored.
Configuration Tips
Default editor
Set a plain-text editor (CotEditor, BBEdit) for remote edit-in-place workflows. Predictable encoding beats an awkward default when you fix a config on a live host.
Bandwidth limits
Throttle transfers on shared connections to avoid killing video calls. Large queues can saturate upload during a client meeting.
Vault hygiene
Document Cryptomator passphrases offline; lost keys mean lost data. Treat vault recovery material with the same care as production secrets.
Alternatives to Cyberduck
Pick Cyberduck for free breadth. Pick Transmit for premium Mac UX. Pick rclone for automation. FileZilla and ForkLift sit in the middle depending on whether you care more about cross-platform FTP or dual-pane Mac management.
Transmit
Panic's polished paid Mac client with stronger everyday UX. Choose it when you live in file transfer all day and will pay for polish; keep Cyberduck when budget and protocol breadth matter more.
FileZilla
Cross-platform FTP staple. UI and security history make some teams cautious. Cyberduck often wins on cloud protocol breadth and open-source Mac friendliness.
ForkLift
Dual-pane Mac file manager with remote connections; paid. Better if you want a full dual-pane manager rather than a single-pane storage browser.
rclone
CLI power tool for cloud sync/copy, scriptable, not a friendly browser. Pair it with Cyberduck: GUI to explore, rclone for unattended bulk.
Pricing
Cyberduck is free to download with all features. A donation (minimum typically $10 USD for a registration key) removes the quit-time donation prompt. Alternatively purchase via the Mac App Store. Mountain Duck is a separate product with its own licensing. CLI duck is free. Verified on cyberduck.io/download (version 9.5.3, 4 Aug 2026).
Pros
- ✓Free with complete feature access (donation optional for prompt removal)
- ✓Excellent protocol and cloud coverage in one bookmark list
- ✓Active 9.5.x releases into August 2026 (9.5.3 on 4 August 2026)
- ✓Apple Silicon and long macOS version support (10.13+)
- ✓Cryptomator integration for encrypted cloud storage
- ✓CLI companion (duck) for automation and CI
Cons
- ✗Donation prompt unless registered or purchased on the App Store
- ✗UI less refined than Panic Transmit
- ✗Single-pane browser vs dual-pane managers like ForkLift
- ✗Very large sync jobs may still belong in rclone/rsync
Community & Support
Help lives on the Cyberduck site, the iterate GmbH tracker and forums, and in community write-ups. Mac users mostly discuss bookmarks, connection profiles, and when to hand a large sync off to rclone. For teams, check in a shared bookmarks file so new staff can import rather than retyping hosts. Keep the Mac App Store build or a donation key if the prompt annoys you; the money funds protocol maintenance. Comparative roundups in 2026 still list Cyberduck among default free Mac FTP and cloud browsers.
Video Tutorials
Getting Started with Cyberduck
More Tutorials
How to Use Cyberduck Tutorial - Connecting with FTP, FTPS, SFTP, uploading and downloading
Hosted~FTP~ Resources • 81.0K views
AWS EC2 File Transfer with Cyberduck on Mac
Silver Lining Cloud Solutions • 107 views
How to Use Cyberduck FTP Client
ExaVault • 43.3K views
Frequently Asked Questions about Cyberduck
About the Author
Productivity & Workflow Analyst
Expert Tips for Cyberduck
Use Cyberduck for interactive browsing and duck/rclone for unattended bulk, do not force the GUI to be your only transfer plane.
If the donation prompt bothers you more than $10, just register, support funds ongoing multi-protocol maintenance.
Bookmark connection profiles in a shared team doc; onboarding is mostly "import these bookmarks," not teaching FTP theory.
Related Technologies & Concepts
Related Topics
Sources & References
Last verified: Aug 9, 2026
Key Verified Facts
- Cyberduck 9.5.3 for macOS was released 4 August 2026 and requires macOS 10.13+ on Intel 64-bit or Apple Silicon.[cite-1]
- Cyberduck is free software; contributors can receive a registration key that disables the donation prompt (minimum amount commonly $10).[cite-1]
- Cyberduck supports FTP, SFTP, WebDAV, S3, B2, Azure, Google Drive, Dropbox and related protocols.[cite-2]
- 1Cyberduck download page
Accessed Aug 9, 2026
"Latest 9.5.3 macOS/Windows builds and registration key details."
- 2
- 3
- 4
- 5
- 6Cyberduck alternatives overview
Accessed Aug 9, 2026
"Competitive landscape notes for Mac FTP/cloud browsers."