SyncFolder
Permissions
SyncFolder only accesses the locations you configure in your tasks. Depending on the features you use, Windows or a cloud service asks you to grant a permission first. This page lists every permission SyncFolder can ask for, when it is asked, and what happens if you don't grant it.
Overview
| Permission | When it is needed | Where you manage it |
|---|---|---|
| Run at startup | Always — needed for every automatic task | Windows Settings › Apps › Startup |
| Notifications | To report task results, ask for confirmations and announce updates | Windows Settings › System › Notifications |
| File system access | To read and write the folders used in your tasks | Windows Settings › Privacy & security › File system |
| Pictures folder | Only for the import task for photos and videos | Windows Settings › Privacy & security › Pictures |
| Windows Firewall rule | Only when your phone must connect to the PC (Mobile Access & Sharing, QR pairing) | Windows Defender Firewall |
| Network credentials | For network shares, servers and cloud storage that require a sign-in | In the task's location settings |
| OneDrive / Google Drive access | When a task uses OneDrive or Google Drive | Your Microsoft or Google account |
| Trusting a server | The first time SyncFolder connects to an FTPS, SFTP or WebDAV server with an unknown certificate or host key | Accepted per server in the connection dialog |
Run at Startup
SyncFolder must start together with Windows to run tasks automatically (on a schedule, at sign-in or lock, on file change, or when a USB drive is plugged in). SyncFolder registers itself as a startup app when it is installed.
If you or your organization switch it off, the Home page shows Automatic syncs won't run with one of these explanations:
- SyncFolder is turned off in Windows startup settings, so automatic syncs won't run. Open Startup apps and switch SyncFolder on. — click Open Startup settings and switch SyncFolder on.
- Startup is disabled in the app. — click Enable Startup.
- Startup is disabled by Group Policy / MDM. — only your IT administrator can change this.
Notifications
SyncFolder uses Windows notifications to tell you when a task has failed or needs your attention, to ask whether a task should start when you plug in a USB drive, to warn before an automatic shutdown, and to announce updates. When notifications are blocked, the Task configuration page shows: "SyncFolder is currently not allowed to send notifications. You can enable this in Windows Settings / System / Notifications."
You can also limit notifications inside SyncFolder on the Settings page.
File System Access
SyncFolder needs to read and write files in the folders that you select as task locations. Windows lists SyncFolder under Privacy & security › File system. Leave this permission on; SyncFolder only uses the folders you select in your tasks and in Mobile Access & Sharing.
Some system folders are protected by Windows and can't be read even with this permission. SyncFolder reports such folders after a run as "Some folders were not accessible." — see Error Messages.
Pictures Folder (Photo and Video Import)
The first time you click Import on the Home page, SyncFolder asks permission to add a special Import task for photos and videos that saves imported files in your Pictures folder:
"You must first allow SyncFolder here to add a special 'Import task for photos and videos' and assign the Pictures folder as the default location for saving the imported files." Click Add task to continue.
If Windows blocks access to the Pictures folder, the dialog shows "Access to the Pictures folder is currently disabled in Windows." Click the link to open Windows Settings, allow access for SyncFolder, and try again.
Windows Firewall Rule
When you switch on Mobile Access & Sharing, SyncFolder starts a small HTTPS file server so that the SyncFolder mobile app can connect to your PC. Windows Firewall must allow this. SyncFolder first explains:
"The Windows firewall needs to have a rule that allows the Android and iOS SyncFolder app to connect with SyncFolder. You will therefore get a popup window that prompts you to allow this rule to be added. You must accept this otherwise mobile devices will not be able to connect."
Click Continue and then Allow in the Windows Security popup. Allow at least private networks.
If you later switch the file server off, the firewall rule stays in place: "Turning off file sharing stops SyncFolder from accepting connections. The Windows Firewall permission granted earlier stays in place; you can remove it manually in Windows Defender Firewall if you want to."
Network Credentials
For network shares (NAS), FTP/FTPS, SFTP and WebDAV servers and the SyncFolder Mobile Sync server, you can store an account name and password in the task. SyncFolder saves these credentials encrypted on your PC. If Windows policies prevent this, you see "Could not encrypt and save user credentials. Check if there are policies on your system preventing this."
When you export your tasks on the Settings page, you can protect the stored passwords with an export password. Without one, the passwords are saved as readable text in the export file.
OneDrive and Google Drive
Cloud services use their own sign-in page. SyncFolder never sees your cloud password.
| Service | What you allow | How to withdraw it |
|---|---|---|
| OneDrive | Read and write access to the files in your OneDrive. This is needed to copy files to your OneDrive and to compare them with what is already there. | In your Microsoft account, under Privacy, Apps and services. |
| Google Drive | Access strictly limited to folders that SyncFolder itself created in My Drive. SyncFolder never sees other files or folders in your Drive. | In your Google Account under Security › Your linked apps (or via myaccount.google.com/permissions). |
When access is withdrawn or expires, the task fails with a message that asks you to sign in again — see Error Messages.
Trusting a Server
The first time SyncFolder connects to a server whose certificate (FTPS, WebDAV) or SSH host key (SFTP) is not known yet, it shows the server's details — owner, issuer, validity and fingerprint, or the host key algorithm and fingerprints:
"The server's certificate is unknown. Examine the source, publisher and fingerprint in the certificate to make sure that the server can be trusted." Click Accept only if you recognize the server. Otherwise click Modify server or Cancel.
Related topics: Getting Started · Mobile Access and Sharing · App Settings