# Hoodik

> Hoodik is a lightweight, self-hosted, end-to-end encrypted cloud storage server. Files are encrypted in the user's browser (or mobile app) before they ever leave the device - the server stores only ciphertext and never has access to plaintext data, file names, thumbnails, or encryption keys.

The server is source available under CC BY-NC 4.0 (readable and self-hostable, but not an OSI-approved open source license) and runs as a single Docker container. It's built in Rust (Actix-web) with a Vue 3 + WebAssembly frontend; the mobile app is Flutter sharing the same Rust crypto crates via FFI. Key exchange is post-quantum: file keys are wrapped with a hybrid of X25519 and ML-KEM-768 (the NIST post-quantum KEM), Ed25519 handles signing, and AEGIS-128L (hardware-accelerated AEAD) encrypts file content. Login uses OPAQUE, so the password never leaves the device; legacy RSA-2048 accounts are supported and auto-upgrade to the new scheme on next login. Supported storage backends: local disk and any S3-compatible object store: Backblaze B2, Wasabi, AWS S3, Cloudflare R2, MinIO.

Files and folders can be shared end-to-end encrypted between accounts on the same server: the sender's browser re-encrypts each file key to the recipient's hybrid X25519 + ML-KEM-768 wrapping key, recipients get a Reader, Editor, or Co-owner role, groups fan a share out to several people at once, and every grant, role change, and revoke lands in a signed, tamper-evident activity log. External sharing works via public links with expiration dates and optional password protection. A built-in WYSIWYG markdown editor stores end-to-end encrypted notes with autosave, per-save version history, and privacy-preserving full-text search (content is tokenized and hashed client-side).

Hoodik is built and maintained by Hudik d.o.o., a Croatian (EU) company. The self-hosted server is free for personal use. The native apps are free - live on the App Store (iOS and macOS) and Google Play (Android). Hoodik Cloud (https://hoodik.io/pricing) is the managed hosting option, run by the Hoodik team: same code and same end-to-end encryption, a dedicated storage bucket per instance, EU or US region choice at signup, and a full export to a runnable self-hosted copy at any time. Plans: Starter 100 GB at 9 EUR/month or 90 EUR/year, Plus 500 GB at 19 EUR/month or 190 EUR/year, with a 14-day free trial.

## Getting Started

- [Quick Start Guide](https://hoodik.io/get-started): Docker deployment, environment variables, S3 configuration, first-account setup
- [Server Source Code](https://github.com/hudikhq/hoodik): GitHub repository - releases, issues, security policy
- [Latest Server Release](https://github.com/hudikhq/hoodik/releases/latest): current stable version
- [Docker Image](https://hub.docker.com/r/hudik/hoodik): `hudik/hoodik:latest` on Docker Hub

## Hoodik Cloud (Managed Hosting)

- [Pricing and Plans](https://hoodik.io/pricing): managed Hoodik instances run by the Hoodik team - plans, what every plan includes, trial terms, and billing FAQ
- [Customer Console](https://console.hoodik.cloud): sign in, or sign up and pick a plan and region
- [Service Status](https://status.hoodik.cloud): live uptime for the control plane API, console, and website
- [Hoodik Cloud Is Live](https://hoodik.io/blog/hoodik-cloud-launch): launch announcement - plans and pricing, EU/US region choice, the export guarantee
- [Managed or Self-Hosted](https://hoodik.io/blog/managed-vs-self-hosted-encrypted-storage): decision guide between Hoodik Cloud and running your own server
- [European Encrypted Cloud Storage](https://hoodik.io/blog/european-encrypted-cloud-storage): what EU hosting does and doesn't get you, and where Hoodik fits

## Security and Architecture

- [End-to-End Encryption Explained](https://hoodik.io/blog/end-to-end-encryption-explained): what E2E means in practice; what the server can and cannot see
- [Why Your Cloud Provider Can Read Your Files](https://hoodik.io/blog/why-your-cloud-provider-can-read-your-files): threat model that makes E2E necessary
- [Post-Quantum Key Exchange with ML-KEM-768](https://hoodik.io/blog/post-quantum-key-exchange-ml-kem-768): why file keys are wrapped with a hybrid X25519 + ML-KEM-768 exchange and login moved to OPAQUE
- [AEGIS-128L: Hardware-Accelerated Cipher](https://hoodik.io/blog/aegis-128l-hardware-accelerated-encryption): why Hoodik uses AEGIS-128L over AES-GCM or ChaCha20-Poly1305
- [Connect AI to Your Encrypted Files](https://hoodik.io/blog/connect-ai-to-your-encrypted-files): how the macOS app's local MCP server lets an AI agent read/write your files while keys never leave the device and the server only stores ciphertext
- [The Agent Should Not Be the Vault](https://hoodik.io/blog/the-agent-should-not-be-the-vault): using the encrypted drive as durable memory for AI agents - the checkout-and-forget workflow, a crew of bots that keep nothing between sessions, and why the standing archive should not live at the AI vendor

## Self-Hosting Guides

- [How to Update Your Hoodik Server](https://hoodik.io/blog/how-to-update-your-hoodik-server): manual Docker updates, Watchtower auto-updates, Diun notifications, Unraid
- [Backblaze B2 + Hoodik: Encrypted Storage at $6/TB](https://hoodik.io/blog/backblaze-b2-hoodik-unlimited-encrypted-storage): S3-compatible storage backend setup
- [Raspberry Pi Encrypted Cloud Server](https://hoodik.io/blog/raspberry-pi-private-encrypted-cloud): full home-server stack with Caddy, Pi-hole, and Cloudflare Tunnel
- [Unraid Container Templates](https://github.com/hudikhq/hoodik-unraid): community-app templates for Unraid NAS deployments

## Why Self-Hosted

- [Self-Hosted Cloud Storage: Why It Matters](https://hoodik.io/blog/self-hosted-cloud-storage-why-it-matters): the case for owning your data
- [Leaving Google Drive: Migration Guide](https://hoodik.io/blog/leaving-google-drive-migration-guide): step-by-step migration from Google Drive
- [The True Cost of Cloud Storage](https://hoodik.io/blog/true-cost-of-cloud-storage): self-hosted vs commercial cloud pricing breakdown
- [How to Store Family Photos So No Company Can Read Them](https://hoodik.io/blog/store-family-photos-privately): what phone photo backup actually exposes, the honest options including iCloud Advanced Data Protection and hosted E2E services, and how to migrate without losing anything

## Comparisons

- [Privacy Check: Can Your Cloud Provider Read Your Files?](https://hoodik.io/privacy-check): per-provider answer for thirteen services on whether the company holds a key to your files

- [Hoodik vs Dropbox](https://hoodik.io/vs/dropbox): mainstream sync-first cloud, provider holds the keys
- [Hoodik vs Google Drive](https://hoodik.io/vs/google-drive): mainstream cloud with collaborative editing, no consumer E2E encryption
- [Hoodik vs OneDrive](https://hoodik.io/vs/onedrive): Microsoft 365 storage, and why Personal Vault is not end-to-end encrypted
- [Hoodik vs iCloud Drive](https://hoodik.io/vs/icloud-drive): Apple storage where E2E encryption is an opt-in setting, and what happened to it in the UK
- [Hoodik vs pCloud](https://hoodik.io/vs/pcloud): E2E encryption sold as a paid add-on covering one folder
- [Hoodik vs Sync.com](https://hoodik.io/vs/sync-com): zero-knowledge by default, closed-source clients, cheaper per terabyte
- [Hoodik vs MEGA](https://hoodik.io/vs/mega): cheap E2E cloud with a documented 2022 academic break of its encryption model
- [Hoodik vs Icedrive](https://hoodik.io/vs/icedrive): Twofish encryption in one paid folder, no published specification or audit
- [Hoodik vs Proton Drive](https://hoodik.io/vs/proton-drive): hosted E2E cloud from Proton. Hoodik Cloud is a 14-day trial in the EU, from €9 a month
- [Hoodik vs Tresorit](https://hoodik.io/vs/tresorit): enterprise E2E cloud
- [Hoodik vs Filen](https://hoodik.io/vs/filen): hosted E2E cloud with a desktop sync client. Hoodik Cloud is a 14-day trial in the EU, from €9 a month
- [Hoodik vs Nextcloud](https://hoodik.io/vs/nextcloud): largest open-source self-hosted cloud
- [Hoodik vs Seafile](https://hoodik.io/vs/seafile): open-source self-hosted cloud

## Mobile App

- [Hoodik on the App Store](https://apps.apple.com/app/hoodik/id6761471179): Apple client for iPhone, iPad, and Mac (requires iOS 14+ / macOS 10.15+)
- [Hoodik on Google Play](https://play.google.com/store/apps/details?id=com.hudikhq.hoodik): Android client

## Optional

- [Blog Index](https://hoodik.io/blog): all posts, filterable by category (Privacy, Guides, Technical, Comparisons)
- [Comparisons Index](https://hoodik.io/vs): all "vs" comparisons
- [Sponsor Hoodik](https://hoodik.io/sponsor): support continued development