Color scheme

Account info

The project is translated by the community. Some languages might be incomplete.

Language

Social login

Password

Receive browser notifications when a share is completed or someone uploads files via your reverse share link.

Push Notifications

Security

Enter your current password to disable TOTP

Enter your current password to start enabling TOTP

Your AES-256 encryption key is never sent to the server. It is kept in your tab for the duration of your session. When the tab is closed, it is automatically purged. Each new session requires you to re-enter it. Store it carefully in a password manager.

End-to-End Encryption (E2E)

Do you really want to delete your account including all your active shares?

Delete Account

Enable TOTP

Unlinking your social accounts may cause you to lose your account if you don't remember your login credentials

Unlink account

A reverse share allows you to generate a unique URL that allows external users to create a share.

Additional options

Do you really want to delete this share? The uploaded files will be permanently removed.

Delete share

Do you really want to delete this reverse share? If you do, the associated shares will be deleted as well.

Delete reverse share

Personal links never expire but can be revoked. Limited links have configurable expiration.

The maximum amount of times this URL can be used to create a share.

Optional name for the reverse share. It will be visible to you and the person uploading the files.

Make the shares created with this reverse share public. If disabled, only you and the share creator will have access to view it.

Sends you an email notification when a share is created with this reverse share link.

Make it easy for the person uploading the file to share it with you. They will only be able to customize the name and description of the share.

Create reverse share

AES-256 encryption key for this reverse share. Store it safely -- without it, uploaded files cannot be decrypted.

Reverse share encryption key

Reverse shares

It's empty here 👀

Share informations

Delete share: {share}

My shares

My account

Maximum number of items inside the cache.

Normally PrivCloud_Sharing caches information in memory. If you run multiple instances of PrivCloud_Sharing, you need to enable Redis caching to share the cache between the instances.

Url to connect to the Redis instance used for caching.

Time in second to keep information inside the cache.

As you have a configured PrivCloud_Sharing with a configuration file, you can't change the configuration through the UI.

Configuration file present

Allow users to include the E2E decryption key in emails sent to share recipients. When enabled, a per-share toggle appears in the share creation modal.
⚠️ This is NOT recommended: email is not a secure channel. The decryption key fragment (#key=…) should ideally be shared through a separate, more secure method (e.g. encrypted messaging, in person).

Whether to allow retrieval of past recipients in shares. Only enable this if SMTP is activated.

Whether to allow email sharing with recipients. Only enable this if SMTP is activated.

Message which gets sent when an admin invites a user. '{url'} will be replaced with the invite URL, '{email'} with the email and '{password'} with the users password.

Subject of the sent email when an admin invites a user.

(Optional) The email address which should be used as the reply-to address for emails sent. If not set, the default email address will be used.

Message which gets sent when a user requests a password reset. '{url'} will be replaced with the reset password URL.

Subject of the sent email when a user requests a password reset.

Message which gets sent when someone created a share with your reverse share link. '{shareUrl'} will be replaced with the creator's name and the share URL.

Subject of the sent email when someone created a share with your reverse share link.

(Optional) Setting this will override the default sender name. The application name will be used if this is not set.

Message which gets sent to the share recipients. Available variables:
 '{creator'} - The username of the creator of the share
 '{creatorEmail'} - The email of the creator of the share
 '{shareUrl'} - The URL of the share
 '{desc'} - The description of the share
 '{expires'} - The expiration date of the share
 These variables will be replaced with the actual value.

Subject of the email which gets sent to the share recipients.

On which URL PrivCloud_Sharing is available

Color theme used throughout the application.

Change your logo by uploading a new image. The image must be a PNG and should have the format 1:1.

Email addresses of accounts allowed to bypass maintenance mode and access the upload page. One email per line.

Custom message displayed on the maintenance page.

When enabled, the upload page is replaced by a maintenance page for all non-admin users.

SEO meta description displayed in search engine results for English-speaking visitors.

SEO meta description displayed in search engine results for French-speaking visitors.

SEO meta description displayed in search engine results.

Whether to set the secure flag on cookies. If enabled, the site will not function when accessed over HTTP.

Time after which a user must log in again (default: 3 months).

Protect sign in, sign up, and password reset forms with hCaptcha to prevent bot abuse.

The secret key from your hCaptcha dashboard used for server-side verification.

The public site key from your hCaptcha dashboard.

Group required for administrative access.

Default user used to perform the user search

LDAP attribute name for the email of an user.

LDAP attribute name for the groups, an user is a member of. This is used when checking for the admin group.

Base location, where the user search will be performed

The user query will be used to search the 'User base' for the LDAP user. %username% can be used as the placeholder for the user given input.

Whether to show a link to imprint and privacy policy in the footer.

The text which should be shown in the imprint. Supports Markdown. Leave blank to link to an external imprint page.

If you already have an imprint page you can link it here instead of using the text field.

The text which should be shown in the privacy policy. Supports Markdown. Leave blank to link to an external privacy policy page.

If you already have a privacy policy page you can link it here instead of using the text field.

Whether to disable password login
Make sure that an OAuth provider is properly configured before activating this configuration to avoid being locked out.

Limit signing in to users in a specific server. Leave it blank to disable.

Limit signing in to specific users by their Discord ID. Leave it blank to disable.

Whether to ignore TOTP when user using social login

Tenant ID of the Microsoft OAuth app
common: Users with both a personal Microsoft account and a work or school account from Microsoft Entra ID can sign in to the application. organizations: Only users with work or school accounts from Microsoft Entra ID can sign in to the application.
consumers: Only users with a personal Microsoft account can sign in to the application.
domain name of the Microsoft Entra tenant or the tenant ID in GUID format: Only users from a specific Microsoft Entra tenant (directory members with a work or school account or directory guests with a personal Microsoft account) can sign in to the application.

Client ID of the OpenID Connect OAuth app

Client secret of the OpenID Connect OAuth app

Discovery URI of the OpenID Connect OAuth app

Role required for administrative access. Must be present in a user’s roles for them to access the admin panel. Leave it blank if you don't know what this config is.

Role required for general access. Must be present in a user’s roles for them to log in. Leave it blank if you don't know what this config is.

Must be a valid JMES path referencing an array of roles. Managing access rights using OpenID Connect roles is only recommended if no other identity provider is configured and password login is disabled. Leave it blank if you don't know what this config is.

Scopes which should be requested from the OpenID Connect provider.

Whether the “Sign out” button will sign out from the OpenID Connect provider

Username claim in OpenID Connect ID token. Leave it blank if you don't know what this config is.

Send push notifications to subscribed users when a share is completed.

The associated VAPID private key. Never share this.

The generated VAPID public key for sending push notifications.

A mailto: URL or contact URL, e.g. mailto:admin@example.com

The default path which should be used to store the files in the S3 bucket.

Whether S3 should be used to store the shared files instead of the local file system.

The key which allows you to access the S3 bucket.

The secret which allows you to access the S3 bucket.

Turn off for backends that do not support checksum (e.g. B2).

When enabled, administrators can access all shares without requiring share tokens or passwords. This allows admins to view and download files from any share for management purposes.

Whether unauthenticated users can create shares

Maximum expiration for anonymous (unauthenticated) shares. Files, S3 objects and access links are automatically deleted after this period. Set to 0 to use the global max expiration instead.

The share creation modal automatically appears when a user selects files, eliminating the need to manually click the button.

Adjust the chunk size for your uploads to balance efficiency and reliability according to your internet connection. Smaller chunks can enhance success rates for unstable connections, while larger chunks make uploads faster for stable connections.

Maximum share expiration. Set to 0 to allow unlimited expiration.

Default length for the generated ID of a share. This value is also used to generate links for reverse shares. A value below 8 is not considered secure.

Adjust the level to balance between file size and compression speed. Valid values range from 0 to 9, with 0 being no compression and 9 being maximum compression. 

Only set this to true if you need to trust self signed certificates.

Email address from which the emails get sent

Whether SMTP is enabled. Only set this to true if you entered the host, port, email, user and password of your SMTP server.

Configuration

Delete share: {id}

Share management

Administration

Do you really want to delete this user and all their shares?

Delete user: {username} ?

Change password

Edit user: {username}

If checked, the user will be able to access the admin panel.

If not checked, the user will receive an email with a link to set their password.

Create user

User management

QR Code

Your account has an end-to-end encryption key. It is never stored on the server -- you must enter it once per session (it will be kept as long as the tab remains open).

Paste your SSKR recovery shards. You must provide at least the number that was required during generation (the threshold T).

E2E Encryption Key

Error

Deploy PrivCloud_Sharing on your own infrastructure in minutes.

End-to-end AES-256 encryption ensures nobody - not even us - can access your files.

Upload files as large as you need. Your storage is your only limit.

Take back control of your data. PrivCloud_Sharing is built by THEMIOT Informatique - cybersecurity experts who believe your files belong to you.

A <h>secure, self-hosted</h> file sharing platform.

Imprint

Maintenance in Progress

Privacy Policy

Re-encryption complete

Re-encryption error

Re-encrypting files

Partial re-encryption

Forgot your password?

Edit {shareId}

The current account does not have permission to access this share

Private share

The share you're looking for doesn't exist.

Share not found

Only the creator of this reverse share can access this share

Access denied

Share removed

The visitor limit from this share has been exceeded.

Visitor limit exceeded

Please complete the verification below to access this share.

Verification required

Previews are not supported for this type of files. Please download the file to view it.

Preview not supported

Please enter the password to access this share.

Password required

Share {shareId}

Please enter your two-factor authentication code

Two-factor authentication required

Welcome back

Create an account

TOTP Authentication

Drag'n'drop files here to start your share. We only accept files up to {maxSize} in total.

Drag'n'drop files here to start your share. No size limit.

Upload files

Email recipients

Name and description

Include the decryption key in the email sent to recipients. They will be able to decrypt and preview files directly.
⚠️ Not recommended: email is not a secure channel. It is safer to share the key fragment (#key=…) separately via an encrypted messaging app or another secure method.

Security options

You will be unable to delete your share manually and view the visitor count. Anonymous shares are automatically deleted after a limited time (files and access link included).