Your files. Your keys.
Your server.
Hoodik is end-to-end encrypted cloud storage built with Rust and Vue. Files are encrypted on your device before they ever leave it, so the server only ever holds a sealed box it can't open. Run it on your own hardware, or subscribe and we'll run it for you.
Why Hoodik?
Built for people who want full control over their own data, whether they run it themselves or have us run it for them.
End-to-End Encryption
Post-quantumZero-knowledgeSelf-hostedAll encryption happens in your browser. The server stores only ciphertext, and your private key never leaves your device. Each file gets its own key, protected with a post-quantum scheme, so recording your traffic now and decrypting it once quantum computers exist doesn't work here. Even your password stays on your device: the server verifies you without ever receiving it.
Share With Other Accounts
ReaderEditorCo-ownerShare files and folders with other accounts on your server — end-to-end encrypted the whole way. Your browser re-encrypts each file key to the recipient's public key, so the server still only ever holds ciphertext. Assign a role per person, bundle frequent recipients into groups, and audit every grant and revoke in a signed, tamper-evident activity log.
Encrypted Markdown Notes
WYSIWYGVersion HistoryWrite markdown in a WYSIWYG editor right inside your vault. Notes auto-save as you type, every save keeps a version you can roll back to, and the content stays searchable — text is tokenized and hashed in your browser, so the server matches your searches without ever reading a word.
Secure Search
File names and note content are tokenized and hashed in the browser. The server matches opaque tokens — no plaintext is ever stored or transmitted.
Encrypted Previews
Browse photos, play videos, and preview HEIC shots without downloading. Thumbnails are generated and encrypted on your device, so even previews are ciphertext on the server.
Public Link Sharing
Share files via a link with the decryption key in the URL fragment. The server never sees the key — recipients decrypt locally in their browser.
Two-Factor Auth
Optional TOTP-based 2FA per user account. Add another layer of protection to your encrypted vault.
Admin Dashboard
Manage users, sessions, invitations, and app settings from a built-in admin panel. Full control of your instance.
Docker-First
Single container deployment with multi-arch images — amd64, armv6, armv7, arm64. Up and running in seconds.
S3-Compatible Storage
Store encrypted chunks on any S3-compatible service — AWS, Backblaze B2, Wasabi, MinIO. Scale to terabytes without growing your VPS disk.
Fast by Design
RustVue.jsChunked concurrent transfers, single-request tar bulk downloads, SQLite or PostgreSQL metadata. Idles at around 20 MB RAM.
Your own encrypted instance, running today
Pick a size, pick a region, and upload the first file in minutes. If it's not for you, cancel inside the trial and pay nothing, or export everything and self-host.
Start free trial