Cyberduck
Server and cloud storage browser
Cyberduck — Official Website
Quick Take: Cyberduck
Cyberduck is the Swiss Army knife of file transfer clients. It connects to more services than any competitor — FTP, SFTP, S3, Google Drive, Azure, Backblaze, and a dozen more — all from one interface. The Cryptomator encryption integration is genuinely useful for sensitive data. The CLI tool enables automation. The price (free, with all features) is hard to beat. The tradeoff: it's not as fast or polished as Transmit, and the interface feels dated compared to premium alternatives. But for the price of free, the breadth of protocol support and built-in encryption make Cyberduck a valuable tool for anyone who manages files across multiple remote services.
Best For
- •Users who manage files across multiple cloud and server protocols
- •Anyone who needs client-side encryption for cloud-stored sensitive data
- •Freelancers with many client server connections to manage
- •DevOps engineers who need CLI-scriptable file transfers
What is Cyberduck?
Cyberduck is an open-source file transfer client for macOS and Windows that connects to remote servers and cloud storage services. It speaks FTP, SFTP, WebDAV, Amazon S3, Google Cloud Storage, Google Drive, Dropbox, Microsoft Azure, OneDrive, Backblaze B2, and OpenStack Swift. You bookmark your servers, browse them like a local file system, and drag files back and forth. The value proposition is breadth. Most file transfer clients handle FTP and SFTP. A few add S3. Cyberduck connects to practically everything. If you manage website files on an SFTP server, assets on S3, documents on Google Drive, and backups on Backblaze — Cyberduck is one app that handles all four. You don't need a separate client for each service. Cyberduck also integrates Cryptomator encryption. You create an encrypted vault on any cloud storage, and Cyberduck encrypts files before upload and decrypts on download — transparently, with no separate app needed. The encryption happens client-side, so even if your S3 bucket or Google Drive is compromised, the files are unreadable without your vault password. For anyone handling sensitive data on cloud storage, this is a genuinely useful feature. The companion CLI tool, `duck`, lets you script file transfers from the terminal. Upload a build artifact to S3: `duck --upload s3://bucket/path/ ./build.zip`. Sync a local directory to an SFTP server: `duck --synchronize sftp://server/path/ ./local/`. The CLI shares bookmarks and credentials with the GUI app, so you don't configure things twice. Cyberduck is free to download, but it shows a donation prompt on quit. A one-time purchase ($23.99 from the Mac App Store, or a minimum $10 donation via cyberduck.io for a registration key) removes the prompt. All features are available in the free version — the purchase is purely to support development. The honest take: Cyberduck isn't the fastest or most polished file transfer client. Transmit (from Panic) is faster, more Mac-native, and has a better interface. But Transmit costs $45 and supports fewer cloud services. Cyberduck's strength is being free, open-source, and connecting to everything. For occasional file transfers or managing diverse cloud storage, Cyberduck is the practical choice.
Install with Homebrew
brew install --cask cyberduckDeep Dive: Cyberduck's Protocol Breadth and Encryption Story
How Cyberduck became the go-to open-source file transfer client for multi-cloud workflows.
History & Background
Cyberduck was first released in 2003 as a straightforward FTP client for macOS. Over the years, it added SFTP, WebDAV, and then cloud storage protocols — S3 in 2008, Google Drive, Dropbox, Azure, and others followed. The Cryptomator integration arrived in 2017, adding transparent client-side encryption. The companion CLI (duck) was introduced to enable scripted and automated transfers. The project has been continuously maintained for over 20 years, making it one of the longest-running macOS utilities. The Windows version launched later but shares the same codebase.
How It Works
Cyberduck is built in Java (with a Cocoa bridge for macOS native UI elements). This cross-platform core is why it supports so many protocols — each protocol is a module that implements a common interface. The Cryptomator integration works at the file-operation level: when you read or write to an encrypted vault, the encryption/decryption layer sits between the GUI and the protocol handler. The duck CLI shares this architecture, which is why it supports the same protocols and reads the same bookmarks.
Ecosystem & Integrations
Cyberduck integrates with the macOS Keychain for credential storage, Spotlight for bookmark search, and Finder for drag-and-drop transfers. It imports bookmarks from FileZilla, Transmit, and other clients. The CLI integrates with shell scripts, cron, launchd, and CI/CD systems. Cryptomator vaults created in Cyberduck are interoperable with the standalone Cryptomator app on all platforms — you can create a vault in Cyberduck on Mac and access it with Cryptomator on Android.
Future Development
Cyberduck continues to add support for new cloud storage protocols as they emerge. Recent additions include improved support for S3-compatible services and enhancements to the Cryptomator integration. Performance improvements for large directory listings and transfers are ongoing areas of development.
Key Features
S3 and Cloud Storage Management
Cyberduck is one of the best GUI tools for working with Amazon S3. You browse buckets, create folders, upload/download files, set ACLs and storage classes, manage lifecycle policies, and generate pre-signed URLs for sharing. It also supports S3-compatible services like MinIO, Wasabi, and DigitalOcean Spaces. The same interface works for Google Cloud Storage, Azure Blob Storage, and Backblaze B2. If you manage cloud object storage and want a visual browser instead of the AWS CLI, Cyberduck does the job well.
Cryptomator Encryption
Cyberduck integrates Cryptomator's client-side encryption directly into its file browser. Create an encrypted vault on any storage (S3, Google Drive, Dropbox, SFTP — anywhere), set a password, and Cyberduck encrypts file content and filenames before upload. When you browse the vault in Cyberduck, files appear decrypted. When anyone else looks at the storage (including the cloud provider), they see encrypted blobs. This is zero-knowledge encryption without a separate app or complex setup. It's particularly valuable for HIPAA compliance, financial data, or any situation where you don't trust the storage provider with plaintext data.
External Editor Integration
Double-click a remote file in Cyberduck, and it opens in your preferred text editor (VS Code, Sublime Text, BBEdit, etc.). Edit the file, save, and Cyberduck automatically uploads the changes back to the server. No manual download-edit-upload cycle. This is most useful for quick config file edits on SFTP servers or tweaking HTML/CSS on a web host. You can configure which editor opens which file types in Cyberduck's preferences.
Bookmark Management
Every connection you make can be saved as a bookmark with a nickname, custom icon, and notes. Bookmarks are searchable, support drag-and-drop reordering, and can be organized into folders. You can import bookmarks from other clients (FileZilla, Transmit) and export them for backup. Bookmarks store the server address, protocol, username, and path — password is saved in the macOS Keychain. For freelancers managing 20+ client servers, the bookmark system keeps connections organized and accessible.
CLI Tool (duck)
The `duck` command-line tool provides scripted access to all of Cyberduck's transfer capabilities. Syntax: `duck --upload s3://bucket/file.zip ./local.zip` or `duck --download sftp://server/path ./local/`. It supports the same protocols as the GUI, reads the same bookmarks and credentials, and works in shell scripts, cron jobs, and CI/CD pipelines. Install separately via `brew install duck`. The CLI makes Cyberduck useful for automation — schedule nightly backups to S3, deploy files to an SFTP server on commit, or sync directories between local and remote.
Synchronization
Cyberduck can synchronize local and remote directories. It compares file timestamps and sizes, shows you a preview of what will change (uploads, downloads, deletions), and lets you confirm before executing. You can sync in one direction (upload only or download only) or bidirectionally. This is useful for deploying website files, maintaining local mirrors of remote backups, or keeping a working copy in sync with a shared server.
Who Should Use Cyberduck?
1The Freelance Web Developer
A freelancer manages 15 client websites, each on different hosting — some on SFTP, some on FTP, a few with assets on S3. Cyberduck's bookmarks organize every client connection. Quick CSS fixes happen via the external editor integration: double-click the stylesheet on the server, edit in VS Code, save, and it's live. Larger deployments use the synchronization feature to upload the changed files from a local build directory. The same app handles all protocols — no switching between tools.
2The DevOps Engineer
A DevOps engineer manages build artifacts on S3, configuration backups on Backblaze B2, and deployment files on SFTP servers. They use the duck CLI in CI/CD scripts to upload build artifacts after each pipeline run. For ad-hoc troubleshooting, the GUI lets them browse S3 buckets visually, generate pre-signed URLs for sharing logs with teammates, and check that backup files exist on B2. Cryptomator vaults protect sensitive configuration files stored in S3.
3The Security-Conscious User
A journalist stores sensitive source documents on Google Drive but doesn't trust Google with plaintext access. They create a Cryptomator vault in their Google Drive via Cyberduck. All files uploaded through Cyberduck are encrypted before reaching Google's servers. The journalist shares the vault password with their editor via a secure channel. Both access the encrypted vault through Cyberduck — Google sees only encrypted filenames and content.
How to Install Cyberduck on Mac
Cyberduck installs via Homebrew, direct download, or the Mac App Store.
Install via Homebrew
Run: brew install --cask cyberduck. This installs the GUI application. For the CLI tool, also run: brew install duck.
Launch and Create Your First Bookmark
Open Cyberduck. Click 'Open Connection' or the '+' button at the bottom. Choose your protocol (SFTP, S3, etc.), enter the hostname, username, and credentials. Click 'Connect.' Save as a bookmark for future access.
Configure Your External Editor
Go to Cyberduck > Preferences > Editor. Select your preferred text editor (VS Code, Sublime Text, etc.). Now double-clicking remote files opens them in your editor with automatic re-upload on save.
Pro Tips
- • The free version is fully functional. The Mac App Store purchase ($23.99) or donation key (minimum $10) only removes the donation prompt on quit.
- • Install the CLI separately with 'brew install duck' — it's not included in the cask install.
- • Store your SSH keys in the macOS Keychain and Cyberduck will use them automatically for SFTP connections.
- • For S3, paste your Access Key ID and Secret Access Key in the bookmark. Cyberduck stores the secret in Keychain.
Configuration Tips
Optimize Transfer Speed
In Preferences > Transfers, increase the number of concurrent connections (default is 5, try 10 for S3 uploads). Enable 'Segmented Downloads' for large files — Cyberduck will download parts of the file in parallel and assemble them. For SFTP, using SSH key authentication instead of password auth can reduce connection overhead when transferring many small files.
Set Up Cryptomator Vaults
Connect to your storage (S3, Google Drive, etc.). Right-click in the file browser > New Encrypted Vault. Set a vault name and password. The vault appears as a folder — anything you put in it is encrypted automatically. Keep the password somewhere safe (1Password, for example). You can create vaults on any storage Cyberduck supports.
Use the CLI for Automated Backups
Schedule a cron job or launchd plist that runs: duck --synchronize s3://backup-bucket/daily/ /path/to/local/data/ --existing compare. This syncs your local data to S3 daily, only uploading changed files. The CLI reads credentials from Keychain, so no plaintext passwords in your scripts.
Import Bookmarks from Other Clients
If you're migrating from FileZilla, Transmit, or WinSCP, Cyberduck can import their bookmark files. Go to Bookmark > Import Bookmarks. This saves you from manually re-entering server credentials for every connection.
Alternatives to Cyberduck
Cyberduck isn't the only file transfer client for Mac. The alternatives make different tradeoffs between polish, speed, and price.
Transmit
Transmit ($45, from Panic) is the premium macOS file transfer client. It's faster, more polished, has a beautiful dual-pane interface, and integrates with Panic Sync for bookmark syncing. Transmit supports S3, SFTP, FTP, and some cloud services but not as many as Cyberduck. It doesn't have Cryptomator encryption. If you transfer files frequently and want the best Mac-native experience, Transmit is worth the price. If you need cloud breadth, encryption, or a free tool, Cyberduck is better.
FileZilla
FileZilla is free, open-source, and the most widely used FTP client across platforms. It handles FTP, SFTP, and FTPS well. It doesn't support cloud storage (no S3, Google Drive, Azure). The interface is dated and cluttered. Cyberduck is better for cloud storage, has a cleaner UI, and supports more protocols. FileZilla is an adequate free option if you only need FTP/SFTP and don't want to learn anything new.
Forklift
Forklift ($29.95) is a dual-pane file manager that also handles remote connections (SFTP, S3, Google Drive, etc.). It's both a Finder replacement and a file transfer client. If you want a single app for local file management and remote transfers, Forklift is interesting. Cyberduck focuses purely on remote connections and does it with broader protocol support and encryption. Choose based on whether you want a Finder replacement or a dedicated transfer client.
Pricing
Cyberduck is free to download and use with all features available. It shows a donation prompt when you quit the app. A one-time purchase ($23.99 on the Mac App Store, or a registration key from cyberduck.io) removes the prompt. The CLI tool (duck) is also free. The source code is open and available on GitHub. All features — including Cryptomator encryption, all protocols, and the CLI — work in the free version.
Pros
- ✓Connects to everything: FTP, SFTP, S3, Google Drive, Azure, Backblaze, and more
- ✓Built-in Cryptomator encryption for zero-knowledge file storage
- ✓Free with all features — purchase only removes donation prompt
- ✓CLI tool (duck) enables scripted transfers and automation
- ✓External editor integration for edit-in-place workflows
- ✓Bookmark system with Keychain-backed credential storage
- ✓Synchronization feature for directory mirroring
- ✓Open-source under GPL
Cons
- ✗Interface is functional but not polished — Transmit looks and feels better
- ✗Transfer speeds are slower than Transmit for large file operations
- ✗The donation prompt on quit is mildly annoying (removable with purchase)
- ✗No dual-pane view — you can't see local and remote side by side
- ✗Large directory listings on S3 can be slow to load
- ✗No built-in terminal or SSH shell access
Community & Ecosystem
Cyberduck is developed by iterate GmbH and hosted on GitHub with open-source contributions. The project has a long history — it launched in 2003 and has been continuously maintained for over 23 years. Documentation is available at docs.cyberduck.io with guides for each supported protocol. The user community is distributed across GitHub issues, Stack Overflow, and various sysadmin forums. Cyberduck doesn't have a dedicated community forum, but issues and feature requests on GitHub typically get responses. The Cryptomator integration has its own community at community.cryptomator.org for encryption-specific questions.
Video Tutorials
Getting Started with Cyberduck
More Tutorials
How to Use Cyberduck Tutorial - Connecting with FTP, FTPS, SFTP, uploading and downloading
Hosted~FTP~ Resources • 81.0K views
AWS EC2 File Transfer with Cyberduck on Mac
Silver Lining Cloud Solutions • 107 views
How to Use Cyberduck FTP Client
ExaVault • 43.3K views
Frequently Asked Questions about Cyberduck
Our Verdict
Cyberduck is the Swiss Army knife of file transfer clients. It connects to more services than any competitor — FTP, SFTP, S3, Google Drive, Azure, Backblaze, and a dozen more — all from one interface. The Cryptomator encryption integration is genuinely useful for sensitive data. The CLI tool enables automation. The price (free, with all features) is hard to beat. The tradeoff: it's not as fast or polished as Transmit, and the interface feels dated compared to premium alternatives. But for the price of free, the breadth of protocol support and built-in encryption make Cyberduck a valuable tool for anyone who manages files across multiple remote services.
About the Author
Productivity & Workflow Analyst
Related Technologies & Concepts
Related Topics
Sources & References
Fact-CheckedLast verified: May 6, 2026
Key Verified Facts
- Cyberduck supports FTP, SFTP, WebDAV, S3, Google Drive, Azure, and many other protocols.[fact1]
- Cyberduck integrates Cryptomator for client-side file encryption.[fact2]
- 1Cyberduck - Libre server and cloud storage browser
Accessed May 6, 2026
- 2Cyberduck Cryptomator Integration
Accessed May 6, 2026
- 3Cyberduck Documentation
Accessed May 6, 2026
Research queries: Cyberduck Mac 2026 file transfer S3 SFTP review