For an encrypted file sync tool, the strongest matches are syncthing/syncthing (Syncthing is a mature, decentralized file synchronization engine that), remotely-save/remotely-save (Remotely Save is a cross-platform tool that synchronizes files) and linsa-io/linsa.io (Linsa). spacedriveapp/spacedrive and anyproto/anytype-ts round out the shortlist. Each is ranked by relevance to your query, popularity and recent activity.
Self-hosted software solutions for securely syncing files and folders across multiple devices with end-to-end encryption.
Syncthing is a decentralized file synchronization engine that maintains consistent data states across multiple devices through peer-to-peer mesh networking. It operates as a background daemon that automatically replicates file creations, modifications, and deletions between trusted nodes without requiring central servers. By utilizing content-addressable block indexing and block-level delta synchronization, the system identifies and transfers only the modified segments of files, ensuring efficient data propagation across heterogeneous environments. The project distinguishes itself through a s
Syncthing is a mature, decentralized file synchronization engine that syncs files directly between devices via peer-to-peer mesh networking, using TLS for end-to-end encryption, and it offers file versioning, conflict resolution, LAN sync, and selective sync across all major platforms—exactly matching the secure, self-hosted sync tool you're after.
Remotely Save is a cloud storage synchronization tool and backup manager designed to keep local files and application data consistent across desktop and mobile devices. It functions as a cross-platform synchronizer that mirrors local data to remote servers using S3 and other cloud protocols. The project focuses on privacy and security through end-to-end encryption, which secures files with a user-defined password before they are uploaded to remote cloud services. It ensures data remains private on third-party servers by applying symmetric client-side encryption. The system includes capabilit
Remotely Save is a cross-platform tool that synchronizes files across devices with client-side end-to-end encryption, but it relies on cloud storage (S3, etc.) as an intermediary rather than offering peer-to-peer or LAN sync, so it covers the core secure sync requirement but not every listed feature.
Linsa.io is an end-to-end encrypted cloud storage service and zero-knowledge data vault. It functions as a private content sharing platform that encrypts files and data on the client side, ensuring only the owner can access the stored content. The project employs a local-first approach, processing data updates and encryption on the local device before syncing encrypted blobs to a remote persistence layer. It uses a zero-knowledge architecture where the service provider cannot access decryption keys or view the plaintext content of stored files. The platform provides capabilities for private
Linsa.io is an open-source tool that syncs files with client-side end-to-end encryption and a local-first design, fitting the core need for secure file synchronization, though it uses a remote persistence layer rather than peer-to-peer and omits features like LAN sync, selective sync, and versioning.
Spacedrive is a decentralized storage client that functions as a distributed file manager, aggregating local, cloud, and network storage into a single virtual filesystem. It operates on a local-first design, prioritizing offline availability by caching metadata and file chunks locally before synchronizing them across devices. By coordinating data access without relying on a central server, it enables users to maintain a private and secure storage network across their own hardware and cloud accounts. The platform distinguishes itself through a virtual storage layer that maps disparate physical
Spacedrive is a decentralized storage client that aggregates your local, cloud, and network storage into a single virtual filesystem with end-to-end encryption and peer-to-peer synchronization, covering the core needs of secure file sync across devices.
anytype-ts is a TypeScript client library and offline-first knowledge base client designed for managing structured layouts and modular blocks within a private distributed database. It functions as a zero-knowledge data synchronizer and schema-driven API wrapper that enables the secure replication of encrypted data across devices. The library utilizes peer-to-peer connectivity and zero-knowledge encryption to ensure data remains private and unreadable to hosting infrastructure. It employs a schema-driven approach to compile data definitions into typed language bindings, ensuring consistent com
Anytype-ts is a peer-to-peer encrypted sync library for the Anytype knowledge base, not a standalone file synchronization tool for arbitrary files — it lacks the general file management and selective sync features this search requires.
SyncTrayzor is a native Windows tray wrapper and management interface for Syncthing. It functions as a process manager that ensures the synchronization service starts automatically upon user login and remains active in the background. The project provides a built-in browser to render the Syncthing web interface and includes a specialized conflict resolver tool to identify and fix versioning mismatches between synchronized files. It integrates directly into the system tray to provide service status updates and desktop notifications. Capability areas include synchronization monitoring for trac
SyncTrayzor is a Windows tray wrapper and management interface for Syncthing, not an end-to-end encrypted file synchronization tool itself — it depends on Syncthing for the core sync and encryption, and it is Windows-only rather than cross-platform, so it does not match the full tool you are searching for.
Gun is a decentralized graph database and synchronization engine designed for real-time, peer-to-peer data management. It functions as a JavaScript library that enables applications to maintain consistent state across distributed nodes without relying on a central server. By utilizing conflict-free replicated data types and a gossip protocol, the system ensures that data updates propagate across the network and reconcile automatically. The project distinguishes itself through a focus on decentralized identity and security, utilizing public-key infrastructure to authenticate users and sign dat
Gun is a decentralized graph database and synchronization engine for building peer-to-peer apps, not a ready-to-use file synchronization tool — it provides the underlying sync and encryption primitives but lacks file versioning, cross-platform clients, and the end-user interface needed for direct device-to-device file syncing.
OpenKeychain is a mobile OpenPGP key manager and identity provider used for storing, importing, and organizing encryption keys and digital certificates. It serves as an end-to-end encryption client and digital signature tool for encrypting and decrypting text and files. The application functions as a central vault that provides encryption and decryption services to third-party apps, such as email clients and password managers. It enables secure public key exchange through online directory retrieval and QR code scanning. The project covers cryptographic identity verification, including the ab
OpenKeychain is a mobile OpenPGP key manager that provides encryption services, but it does not synchronize files between devices — it is a cryptographic building block, not a file sync tool.
qTox is a decentralized instant messaging application and a Tox protocol chat client. It provides a cross-platform graphical user interface for encrypted text, voice, and video communication. The project enables peer-to-peer encrypted messaging and secure VoIP communication without relying on central servers or third-party intermediaries. It utilizes the Tox protocol to facilitate direct voice and video calling and peer-to-peer file exchange. Identity and network management are handled through decentralized identity mapping and a distributed hash table for peer discovery and routing. All dat
qTox is a decentralized instant messaging client with encrypted peer-to-peer file exchange, but it is built for real-time communication and lacks the dedicated file-synchronization features—such as versioning, conflict resolution, and selective sync—that this search requires.
libsignal is a cryptographic library that implements the Signal Protocol, providing the core primitives for end-to-end encrypted messaging with forward secrecy and deniable authentication. It includes the Double Ratchet algorithm for iteratively deriving fresh encryption keys per message, and the X3DH key agreement protocol for establishing shared secrets between parties asynchronously. A session state machine maintains cryptographic state across message exchanges, supporting recovery and out-of-order delivery. The library extends beyond basic messaging encryption with capabilities such as ze
libsignal is a cryptographic library implementing the Signal Protocol for messaging encryption, not a file synchronization tool—it lacks peer-to-peer sync, cross-platform clients, file versioning, and conflict resolution, so it only provides the encryption piece of what you need.
Yjs is a CRDT framework and real-time state synchronization engine providing shared data types for collaborative software. It functions as a shared data type library of collaborative maps, arrays, and text structures that converge automatically across distributed clients, serving as a local-first data store and a collaborative editor backend. The system distinguishes itself through a synchronization engine that encodes document changes into commutative binary updates. It employs state-vector based differencing to transmit only missing incremental updates between peers and uses relative-positi
Yjs is a CRDT framework for real-time collaborative editing of shared data structures, not a file synchronization tool — it syncs application state rather than files and doesn’t provide end‑to‑end encryption, making it a building block for collaborative apps rather than the secure file‑sync tool you’re looking for.
ShareJS is a collaborative document database and synchronization engine designed for real-time shared state management. It provides an operational transform sync engine to enable simultaneous editing of plain-text and JSON data, and a RESTful synchronization API for managing document states via HTTP. The system features an offline-first data sync layer that queues local modifications while disconnected and automatically pushes edits upon reconnection. It also includes a middleware access control layer that intercepts database requests to enforce security policies and perform request rewriting
ShareJS is a real-time collaborative document synchronization engine for concurrent editing, not a file synchronization tool for devices; it lacks the core features of end-to-end encrypted peer-to-peer file syncing this search requires.
| Repository | Stars | Language | License | Last push |
|---|---|---|---|---|
| syncthing/syncthing | 85.4K | Go | MPL-2.0 | |
| remotely-save/remotely-save | 6.8K | TypeScript | other | |
| linsa-io/linsa.io | 16.9K | TypeScript | — | |
| spacedriveapp/spacedrive | 38.3K | Rust | NOASSERTION | |
| anyproto/anytype-ts | 7.1K | TypeScript | other | |
| canton7/synctrayzor | 6.2K | C# | MIT | |
| amark/gun | 19.1K | JavaScript | NOASSERTION | |
| open-keychain/open-keychain | 2.5K | Java | gpl-3.0 | |
| qtox/qtox | 5K | C++ | GPL-3.0 | |
| signalapp/libsignal | 5.8K | Rust | AGPL-3.0 |