Open Source Tresorit Alternatives
A curated collection of the 2 best open source alternatives to Tresorit.
The best open source alternative to Tresorit is Peergos. If that doesn't suit you, we've compiled a ranked list of other open source Tresorit alternatives to help you find a suitable replacement. Other interesting open source alternative to Tresorit is Hoodik.
Tresorit alternatives are mainly File Management & Sync but may also be Data Security & Privacy or Databases. Browse these if you want a narrower list of alternatives or looking for a specific functionality of Tresorit.
Peergos is a peer-to-peer encrypted filesystem with messaging, email, and social features, for people who want to own where their data lives.
Peergos is building toward a web where applications cannot track you and users decide what each app may see. Its foundation is a peer-to-peer encrypted global filesystem with fine-grained access control, built to resist surveillance of file contents and the friendship graph. On top sit a secure messenger, an encrypted email client and bridge, and a private social network.
The architecture stacks six layers. IPFS provides storage, routing, and retrieval through a minimal Java implementation called Nabu. A key pair authorizes writes, each of them signed. Data lives as a merkle structure of encrypted chunks under random labels, with no cross links visible to the server, which cannot deduce file sizes. Encryption happens on the user's machine with TweetNaCl, each 5MiB chunk encrypted independently. Social and sharing layers sit above.
The project states its aims plainly, and they explain the design.
- No central node: storage runs across a network that is hard to disrupt or surveil.
- Hidden metadata: sharing leaves no visible record of who shared with whom.
- Sandboxed apps: web apps load and run from Peergos under user-granted permissions, without exfiltrating data.
- No certificate authority: identity does not depend on the central TLS trust architecture.
- Self-hostable: a machine at home can host a user's own storage and social platform.
Anonymity is not offered yet; the project says it can only be approximated by using an account solely over Tor. The server runs on the JVM, mostly Java, with the web interface cross-compiled to JavaScript. Audits from 2019 and 2024 are published in the repository.
End-to-end encrypted cloud storage you host yourself, with browser-side encryption, encrypted notes, and share links the server can never read.
Hoodik is a self-hosted storage server that never sees your files. Encryption and decryption happen in the browser, so what reaches the disk is ciphertext, which removes the usual trade of handing a storage provider readable copies of everything you upload.
The backend is Rust on Actix-web and the frontend is Vue 3. Every account gets an Ed25519 signing pair and a hybrid X25519 with ML-KEM-768 wrapping pair, files are encrypted chunk by chunk with AEGIS-128L, and login runs over OPAQUE so the password never crosses the wire. Older RSA-2048 accounts still work and migrate on the next login.
Encryption in the browser normally costs you every feature that depends on the server reading data, and Hoodik works around that.
- Secure search: file names and note contents are tokenized locally and tagged with HMAC under a key the server never holds.
- Encrypted notes: markdown notes written in a WYSIWYG editor are auto-saved, encrypted and searchable like uploaded files.
- Public share links: the link key rides in the URL fragment, so the recipient decrypts locally and the server decrypts nothing.
- Account controls: optional TOTP two-factor per user, plus an admin dashboard for users, sessions and invitations.
- Storage choices: SQLite by default, PostgreSQL through one environment variable, and chunks on local disk or any S3-compatible service.
Deployment is a single container with multi-arch images for amd64, arm64, armv6 and armv7. Keep your private key somewhere safe, because it is the only route back into a forgotten account.
