[{"data":1,"prerenderedAt":171},["ShallowReactive",2],{"vs-sync-com":3},{"id":4,"title":5,"body":6,"competitor":116,"date":119,"description":120,"draft":121,"extension":122,"features":123,"meta":165,"navigation":126,"path":166,"seo":167,"stem":168,"verdict":169,"__hash__":170},"vs\u002Fvs\u002Fsync-com.md","Hoodik vs Sync.com: An Open, Self-Hosted Sync.com Alternative",{"type":7,"value":8,"toc":108},"minimark",[9,13,16,21,24,27,30,33,45,49,52,55,58,61,65,68,71,74,77,80,91,95,98,101],[10,11,12],"p",{},"Sync.com is the strongest competitor in this comparison and it deserves a straight assessment. It is zero-knowledge by default, not behind a paid folder. It has been doing this since 2011. It is cheaper per terabyte than Hoodik Cloud, and its desktop sync client does something Hoodik does not do at all.",[10,14,15],{},"If you want encrypted cloud storage and nothing on this page persuades you otherwise, Sync is a good choice and we would rather say so than pretend.",[17,18,20],"h2",{"id":19},"the-difference-is-verifiability","The Difference Is Verifiability",[10,22,23],{},"Sync's architecture is sound as described. Files are encrypted client-side with AES-256-GCM, keys are wrapped with RSA-2048, your private key is encrypted with a PBKDF2-stretched password, and the server stores an encrypted key it cannot open. Your password is hashed with Bcrypt before it is sent. That design, implemented correctly, gives you real zero-knowledge storage.",[10,25,26],{},"The catch is in \"as described.\" Sync publishes its web panel code, which is more openness than pCloud, Icedrive, or Tresorit offer. The server is closed. The desktop and mobile applications are closed. So for the server that receives everything, and for the desktop client many people use daily, the zero-knowledge property is a claim you accept on the company's reputation.",[10,28,29],{},"That is not an accusation of bad faith. Sync has no history that suggests any. It is a statement about what you can check. A SOC 2 audit, which Sync has, examines organizational controls: access management, change procedures, monitoring. It does not examine whether the encryption in the desktop client does what the marketing says.",[10,31,32],{},"Hoodik's server is source-available Rust, and so is the web client. You can read the code that receives your uploads and confirm that it never sees a key. You can compile it and run that binary. You can watch the requests the client sends and check that a search query leaves your machine as a list of SHA256 hashes. The guarantee is the same one Sync makes; the difference is that you can test it.",[10,34,35,36,40,41,44],{},"Hoodik's mobile and desktop apps are not open source, and it would be dishonest to run this argument without saying so. What is public is the part that carries the guarantee: the ",[37,38,39],"code",{},"cryptfns"," and ",[37,42,43],{},"transfer"," crates hold every cipher, key-wrapping routine, and chunked-upload path, and the mobile apps call into those exact crates over Rust FFI rather than reimplementing any of it in Dart. Both crates are in the public repository. So the encryption path is auditable on every platform while the Flutter application wrapped around it is not. Against Sync that is a materially larger auditable surface, and it is still not the same thing as being open source end to end.",[17,46,48],{"id":47},"where-synccom-wins","Where Sync.com Wins",[10,50,51],{},"Price. Around $8\u002Fmonth for 2 TB billed annually is far below a Hoodik Cloud instance per gigabyte. Hoodik Cloud provisions a dedicated instance with its own database and storage bucket rather than selling space on a shared system, which costs more. If you need multiple terabytes managed for you, Sync wins on cost and it is not close.",[10,53,54],{},"The sync client. Windows and macOS apps with selective sync, Vault for cloud-only storage, and the general behavior of a folder that stays mirrored. This is Sync's core competency and Hoodik has no equivalent, only web, iOS, Android, and macOS apps you open deliberately.",[10,56,57],{},"Maturity and paperwork. Fourteen years of operation, a SOC 2 report, HIPAA and GDPR compliance materials, business admin controls, and support staff. If a procurement process is going to ask for certifications, Sync has them and Hoodik does not.",[10,59,60],{},"Team features. User management, permissions, activity logs, and remote wipe, refined over years of business customers.",[17,62,64],{"id":63},"where-hoodik-wins","Where Hoodik Wins",[10,66,67],{},"You can read the server. Everything above about verifiability lands here.",[10,69,70],{},"The key exchange is post-quantum. Sync wraps file keys with RSA-2048, which is classical and falls to a sufficiently capable quantum computer. Hoodik wraps every file key with a hybrid of X25519 and ML-KEM-768, the KEM NIST standardized for the post-quantum era. Harvest-now-decrypt-later is a real strategy against long-lived archives, and RSA-2048 is precisely what it targets.",[10,72,73],{},"Login leaks nothing. Sync's client hashes your password with Bcrypt and sends the hash, so the server holds a value that is worth attacking if its database ever leaks. Hoodik uses OPAQUE, an asymmetric password-authenticated key exchange, where the server never receives your password or anything derived from it that can be cracked offline.",[10,75,76],{},"Search reaches further. Sync can only search file names, because the server cannot read contents. Hoodik tokenizes with a BERT tokenizer on the client, hashes each token with SHA256, and matches hashes server-side, so note contents are searchable too while the server still learns nothing about the query.",[10,78,79],{},"Jurisdiction is yours to pick. Sync is Canadian, and Canada is a Five Eyes member. Zero-knowledge encryption makes that matter much less for file contents, since a warrant produces ciphertext either way, and it still matters for metadata and for account-level compulsion. With Hoodik you choose: self-host anywhere, or pick the EU or US region on Hoodik Cloud.",[10,81,82,83,90],{},"There is an exit. Run Hoodik on your own hardware for free, or run it on ",[84,85,89],"a",{"href":86,"rel":87},"https:\u002F\u002Fhoodik.cloud",[88],"nofollow","Hoodik Cloud"," and export the entire instance to a server you control whenever you want. Sync gives you your files back; it does not give you the service.",[17,92,94],{"id":93},"who-should-use-which","Who Should Use Which",[10,96,97],{},"If you want the cheapest mature zero-knowledge storage with a proper desktop sync client, and you are comfortable taking the implementation on trust, Sync.com is the better buy. That is a defensible position and a lot of people should take it.",[10,99,100],{},"Hoodik is for the case where trust is the thing you are trying to remove. If your reason for wanting encrypted storage is that you do not want to rely on a company's word, then a closed-source client is the weak point in the whole arrangement, and Sync cannot fix it without publishing the code.",[10,102,103,104,107],{},"The post-quantum wrap matters for anything you expect to stay secret past the 2030s, and the self-host exit matters if you want the option of not depending on a vendor at all. ",[84,105,89],{"href":86,"rel":106},[88]," is €9\u002Fmonth for 100 GB or €19\u002Fmonth for 500 GB, in the EU or US, with a 14-day trial and an export you can run yourself.",{"title":109,"searchDepth":110,"depth":110,"links":111},"",2,[112,113,114,115],{"id":19,"depth":110,"text":20},{"id":47,"depth":110,"text":48},{"id":63,"depth":110,"text":64},{"id":93,"depth":110,"text":94},{"name":117,"website":118},"Sync.com","https:\u002F\u002Fwww.sync.com","2026-07-29","Sync.com is zero-knowledge but closed source. Hoodik is a Sync.com alternative you can read and host yourself, with post-quantum key exchange and full export.",false,"md",[124,128,131,134,138,141,143,146,150,153,156,160],{"name":125,"hoodik":126,"competitor":126,"note":127},"E2E Encryption",true,"Both are zero-knowledge by default. Sync uses AES-256-GCM with RSA-2048 key wrapping; Hoodik uses AEGIS-128L with a hybrid X25519 and ML-KEM-768 wrap.",{"name":129,"hoodik":126,"competitor":121,"note":130},"Post-Quantum Key Exchange","Sync's key wrapping is RSA-2048, which is classical. Hoodik's hybrid wrap includes ML-KEM-768, the post-quantum KEM standardized by NIST.",{"name":132,"hoodik":126,"competitor":121,"note":133},"Server Source Available","Sync publishes its web panel code, which is more than most competitors do, but its server is closed. Hoodik publishes the server and the web client. Neither project publishes its mobile app; Hoodik's mobile encryption runs in the public cryptfns and transfer crates via Rust FFI.",{"name":135,"hoodik":126,"competitor":136,"note":137},"Password Never Sent to Server","partial","Sync hashes the password client-side with Bcrypt and sends the hash. Hoodik's OPAQUE exchange sends no password-derived value at all, so a database leak gives an attacker nothing to crack offline.",{"name":139,"hoodik":126,"competitor":136,"note":140},"Search Across Encrypted Files","Sync searches file names only, because the server cannot read contents. Hoodik matches SHA256 token hashes computed on the client, covering note contents as well as names.",{"name":142,"hoodik":126,"competitor":121},"Self-Hosted Option",{"name":144,"hoodik":145,"competitor":126},"Managed Hosting","Hoodik Cloud, from €9\u002Fmo",{"name":147,"hoodik":148,"competitor":149},"Jurisdiction","Your choice","Canada (Five Eyes)",{"name":151,"hoodik":121,"competitor":126,"note":152},"Desktop Sync Client","Sync's Windows and macOS sync client with selective sync and Vault is a core part of the product. Hoodik has no folder-sync daemon.",{"name":154,"hoodik":121,"competitor":126,"note":155},"Compliance Certifications","Sync holds a SOC 2 audit and markets HIPAA and GDPR compliance. Note that SOC 2 audits organizational controls, not the cryptographic implementation.",{"name":157,"hoodik":158,"competitor":159},"Free Tier","Unlimited self-hosted","5 GB",{"name":161,"hoodik":162,"competitor":163,"note":164},"Pricing","Free self-hosted · Cloud from €9\u002Fmo","~$8\u002Fmo for 2 TB billed annually","Sync is substantially cheaper per gigabyte than a dedicated Hoodik Cloud instance. Self-hosted Hoodik is free and capped only by your disk.",{},"\u002Fvs\u002Fsync-com",{"title":5,"description":120},"vs\u002Fsync-com","Pick Sync.com for the cheapest mature zero-knowledge storage with a real desktop sync client. Pick Hoodik if you want to verify the claim rather than trust it, with post-quantum crypto and a self-host exit.","nhAYOurvNjNTdJNy9Q5FXSwCnCobOHgUyjk2LyitU_Y",1785479168420]