Open-source alternatives to Gocryptfs

This project is a Telegram API client and media archiving system designed to programmatically retrieve chat histories and export media. It functions as a download manager and message forwarder, allowing users to back up photos, videos, and documents from Telegram chats into structured local archives. The system distinguishes itself through advanced content filtering and forwarding capabilities. It can monitor chats for new messages, apply custom regular expressions to filter media by size or date, and automatically forward content between chats. This includes the ability to export protected c

WinSCP is a remote file manager and SFTP and FTP client that provides a graphical interface for browsing, editing, and organizing files on remote servers and cloud storage. It serves as a multi-protocol tool supporting SFTP, FTP, FTPS, SCP, S3, and WebDAV, and functions as an S3 object storage browser for managing files and buckets. The application distinguishes itself through its automation capabilities, allowing for scripted file transfers and remote command execution via a command-line interface or a .NET assembly. It also features directory synchronization to match local and remote folder

Syncthing is a decentralized file synchronization engine that maintains consistent data states across multiple devices through peer-to-peer mesh networking. It operates as a background daemon that automatically replicates file creations, modifications, and deletions between trusted nodes without requiring central servers. By utilizing content-addressable block indexing and block-level delta synchronization, the system identifies and transfers only the modified segments of files, ensuring efficient data propagation across heterogeneous environments. The project distinguishes itself through a s

lakeFS is a data lake versioning system that provides Git-like branching and commits for large datasets stored in object storage. It functions as a version control layer, enabling the creation of immutable snapshots, atomic commits, and zero-copy branching to create isolated environments for data experimentation without duplicating physical files. The system serves as an S3-compatible storage gateway and an Iceberg REST catalog, allowing standard cloud storage protocols and compatible clients to manage versioned tables. It acts as a data quality gatekeeper by using an event-driven hook system

btfs is a virtual filesystem that mounts BitTorrent torrents and magnet links as local directories. It utilizes a user-space filesystem to present decentralized network data as a local directory tree, allowing users to stream and read files without downloading the entire archive first. The system implements an on-demand streaming mechanism that downloads data incrementally. This process fetches specific chunks of a file only when the operating system requests a read operation on those byte ranges, assembling fragmented data blocks into a coherent file structure. The tool provides a read-only

TabFS is a browser automation tool and virtual filesystem that maps browser tabs and page elements to files. It provides a FUSE-based bridge that allows external scripts and tools to interact with a browser's JavaScript runtime through standard file system operations. The system enables the execution of JavaScript expressions and the manipulation of DOM elements by reading and writing synthetic files. Users can control tab state, create new tabs, and inspect metadata such as URLs and titles using a file manager or shell. The project covers capabilities for browser automation, including acces

libfuse is a library and kernel module combination that enables the development of custom Linux filesystems that run in userspace rather than in kernel space. It provides a bridge between the kernel's virtual filesystem layer and a userspace daemon, allowing filesystem operations to be forwarded and handled by a regular user process. The project offers two distinct APIs: a high-level callback-driven API where filesystem operations are implemented as simple functions that return results synchronously, and a low-level API that exposes raw kernel request structures directly for fine-grained contr

Mountpoint for Amazon S3 is a FUSE-based filesystem client that mounts S3 buckets as local directories, enabling standard file operations on objects without custom code. It enforces S3 bucket permissions through AWS Identity and Access Management policies on every operation, and implements lazy object materialization to fetch content on-demand rather than downloading entire objects at mount time. The filesystem maps S3's flat key namespace into a hierarchical directory structure using forward slashes as path separators, and supports write-back object assembly that accumulates local writes into

AppImageKit is a system of tools and utilities for bundling Linux desktop applications into single-file, portable executables. It functions as a packager that converts application directories into self-mounting binaries, allowing software to run across multiple Linux distributions without a formal installation process. The project enables portable software distribution by isolating application configurations and home directories from the host system, which allows applications to run from removable media. It includes a filesystem manager for extracting, inspecting, and mounting the embedded im

Kubo is a peer-to-peer implementation of the InterPlanetary File System (IPFS) designed for decentralized data storage and content delivery. It uses content-addressing, directed acyclic graphs, and distributed hash tables to identify, distribute, and retrieve data across a network without relying on central servers. The project differentiates itself by providing a virtual filesystem via FUSE, which maps decentralized network namespaces to local operating system directories for direct file access. It also includes integrated HTTP gateways that translate peer-to-peer content into standard web t

s3fs-fuse is a FUSE-based filesystem that mounts Amazon S3 buckets and S3-compatible object storage as local directories. It functions as a cloud object storage gateway, translating standard POSIX filesystem calls into RESTful API requests to allow remote objects to be accessed as if they were local files. The project enables the mapping of remote object stores to local paths on Linux, macOS, and FreeBSD. It supports integration with third-party S3-compatible providers through the use of custom service URLs and specialized request styles. The system includes capabilities for local data and m

SSHFS is a network filesystem client that maps remote server directories to local mount points. It functions as a userspace implementation of a filesystem, allowing users to access and manage remote files as if they were on a local disk using the SFTP protocol over SSH. The tool distinguishes itself by offering multiple transport options, including encrypted SSH tunnels for security and direct TCP socket connections to bypass encryption for higher throughput. It also supports connectivity via virtual sockets to access directories hosted inside virtual machines. The system includes capabiliti

OpenViking is a multi-tenant context server and knowledge base administration system designed to provide AI agents with persistent long-term memory. It enables the indexing of diverse documents and codebases to support retrieval-augmented generation, allowing agents to recall past interactions, user preferences, and learned experiences across sessions. The project is distinguished by its use of a URI-based virtual filesystem to organize memories, resources, and skills. It implements a tiered context loading system that balances retrieval precision with token budgets by structuring data into a

Cryptomator is a client-side cloud encryption tool and cross-platform vault manager. It provides a transparent encryption layer that encrypts files and folder structures locally before they are uploaded to a cloud storage provider. The software creates virtual encrypted drives that mount encrypted vaults, allowing users to interact with their data as if it were on a physical disk. It supports the management of multiple independent encrypted containers, each protected by a unique password. The project covers data privacy through directory structure obfuscation and filename encryption to hide

Teldrive is a web-based cloud storage interface that uses Telegram as a backend for storing and organizing files. It functions as an encrypted cloud drive and a remote storage bridge, allowing users to manage files through a dedicated file manager. The system optimizes data throughput by using a proxy to aggregate multiple authentication tokens, which bypasses single-account rate limits to increase upload and download speeds. It ensures data privacy through per-file salt encryption for both file data and metadata. The project covers remote file management, including the ability to mount stor

dotenvx is a cross-platform command-line tool that encrypts .env files using public-key cryptography and decrypts them at runtime, injecting the plaintext secrets into a process environment before execution. It treats encrypted environment files as self-contained vaults that are loaded and decrypted entirely in memory each time a command runs. What sets dotenvx apart is its ability to armor the private decryption key itself with a passphrase, allowing that key to be stored remotely and retrieved only when decryption is needed. A single encrypted vault file can be bound to multiple per-envir

Dokan is a user-mode file system library for Windows that allows applications to create custom file systems accessible as normal Windows volumes without writing kernel-mode device drivers. It provides a FUSE compatibility layer that maps FUSE operations to Dokan callbacks, enabling existing FUSE-based file systems to run natively on Windows by rebuilding the source code with Cygwin or MinGW. The library exposes its file system API through language-specific wrappers for C, .NET, Java, Delphi, Ruby, and Python, supporting cross-language file system development. It handles file operations throug

Kopia is a backup utility designed to create encrypted, deduplicated, and compressed snapshots of files and directories. It functions as a client-side tool that secures data locally before transmitting it to various storage targets, ensuring that sensitive information remains protected throughout the backup process. The system utilizes content-addressable block storage and metadata-driven versioning to identify and remove redundant data across multiple snapshots. By employing a pluggable storage abstraction layer, it supports a wide range of local, network, and cloud-based storage providers,

This project is a comprehensive hardware security guide for using YubiKey tokens to manage encryption, digital signatures, and secure authentication. It provides technical instructions for configuring hardware security modules to handle digital identity and cryptographic materials. The documentation focuses on the implementation of OpenPGP and SSH workflows, specifically covering the creation of master key hierarchies, the rotation of subkeys, and the use of hardware-backed keys for secure shell connections. It also details methods for verifying code authorship through signed Git commits and

This project is a multi-device synchronization tool and remote storage manager that maintains a mirrored state of data between a local machine and a remote server. It provides cloud file synchronization and cross-device data access, allowing local files and folders to be consistent across multiple computers. The client utilizes WebDAV for file management and synchronization, while employing the Open Collaboration Services API for account and session management. It integrates a cross-platform native wrapper to provide OS-level file system integration and includes a command line interface for m

Upspin is a decentralized naming and storage system that provides an end-to-end encrypted file system. It assigns every user a unique identity and organizes files within a global, permissioned namespace where data is encrypted on the client before transmission. The system separates identity resolution from data storage using a public-key identity provider and a key-server architecture. This allows for decentralized identity management and the resolution of usernames to specific directory and storage server addresses. The project includes a hierarchical access control system that manages read

go-ipfs is an implementation of an IPFS node, providing a distributed filesystem and a content-addressable storage system. It enables the storage and retrieval of data based on unique cryptographic hashes rather than fixed network locations, allowing files to be shared across a peer-to-peer network without a central authority. The system utilizes a distributed hash table and a peer-to-peer gossip protocol to route requests and propagate network state and metadata. It organizes data using a Merkle DAG structure to support efficient deduplication and versioning of content. Capabilities include

Sekey is a hardware-backed SSH key manager and authentication agent designed to isolate private keys from system memory. It utilizes a secure enclave to generate, store, and manage cryptographic key pairs, ensuring that sensitive material remains within a protected hardware environment and cannot be extracted by the host system. The project implements biometric-gated request signing, requiring a biometric authentication event before the hardware security module signs a cryptographic challenge. It functions as a middleware bridge that connects standard SSH protocols to these hardware-based sig

bup is a deduplicating backup manager and incremental backup system. It uses a Git packfile-based storage format to eliminate redundant data across files and versions, treating every incremental save as a full backup. The system provides secure remote transport interfaces for transferring and managing backup data on remote servers via SSH. It also includes a backup repository browser available as both a web interface and a filesystem mount for exploring and retrieving files from snapshots. The project covers broad capability areas including disaster recovery, repository administration, and s

Borg is a command-line backup utility designed for deduplicated data archiving and secure storage. It functions by identifying unique file chunks and applying compression to minimize the total storage footprint across multiple backup versions. The software distinguishes itself through the use of authenticated encryption, which ensures that all stored data remains confidential and protected against unauthorized tampering. It also provides a virtual filesystem interface, allowing users to mount archives as local directories to browse and access individual files without performing a full restora

Duplicati is a self-hosted backup server designed to perform encrypted, incremental, and compressed backups to a wide range of local, network, and cloud-based storage providers. It functions as a background service that automates recurring data protection tasks, ensuring that only changed data blocks are stored to maximize efficiency and minimize bandwidth usage. The project distinguishes itself through a centralized management console that allows for the orchestration of multiple distributed backup agents from a single web-based dashboard. It supports multi-tenant management, enabling the or

Databasus is a self-hosted backup platform that automates PostgreSQL backups, verifies their restorability, and stores them across multiple destinations while managing team access with role-based permissions. It combines on-the-fly AES-256-GCM encryption, cron-driven scheduling, job-queue-based verification, multi-destination storage, WAL streaming, throwaway container restore testing, and workspace-based role access control into a unified backup system. The platform distinguishes itself through automatic backup verification that restores each backup into a temporary database container for in