End-to-end encrypted cloud storage, without compromise.
Stockage cloud chiffré de bout en bout, sans compromis.
Read the documentation in your language:
- Zero-knowledge encryption — files are encrypted on your device before upload; the server never sees plaintext content
- AES-256-GCM file encryption, split into 10 MB chunks with unique nonces
- Argon2id key derivation (64 MB memory, 4 iterations)
- RSA-OAEP 4096-bit key pair per user for asymmetric sharing
- Optional filename encryption — file and folder names can be encrypted client-side at registration
- MFA (TOTP) two-factor authentication support
- Account recovery code — password-independent recovery without server access to your keys
- Upload, download, organize files and folders
- Streaming decryption — large files are never fully loaded into memory
- Recently opened files
- File search (disabled when filename encryption is active)
- P2P transfer — direct device-to-device file transfer over WebRTC DataChannel, encrypted with AES-GCM; a TURN relay (no intermediate storage, only relay) is used when a direct connection is not possible, without compromising encryption.
- Public link sharing — optional password protection and expiration (1–30 days)
- Friend sharing (user-to-user) — end-to-end encrypted via RSA; only the recipient can decrypt
- Friend system via unique friend codes (e.g.
#A7KD92XZ) - Real-time online presence
- P2P transfer notifications with sound and browser push
- Light / dark theme
- Multi-language interface (i18n)
- Usage dashboard (storage, P2P quota)
- GDPR-compliant data export and account deletion (30-day grace period)
This section lists planned and considered features. It is not a commitment to a release date.
git clone https://github.com/Buuuntyyy/Kagibi.git
cd Kagibi
cp backend/.env.example backend/.env
cp frontend/.env.example frontend/.env
cd backend
go run main.go
cd frontend
npm install
npm run devFrontend: http://localhost — Backend: http://localhost:8080
AGPLv3 — see LICENSE.