Peergos

Capabilities

• Metadata-hiding encryption Files are encrypted on the device with keys derived locally from the password, so the server holds only ciphertext blocks. File names, sizes, folder structure, modification times, and contact lists stay invisible to the server.[1]

• Post-quantum sharing The filesystem uses quantum-resistant symmetric cryptography and hashing, while sharing runs over a hybrid of X25519 and ML-KEM-1024. A file shared today is designed to stay unreadable to someone recording traffic for a future quantum computer.[1]

• Two-way folder sync Almost any folder can sync bidirectionally across unlimited devices, with only changed chunks of large files uploaded. Sync pairs can be paused and resumed, deletion propagation can be switched off to turn sync into backup, and mobile data can be excluded.[1]

• Native drive mount On Windows, Linux, and Android the drive appears in the file manager as an ordinary drive, decrypting on demand as files open. Mounting requires a second factor and can be limited to one session; macOS support has not landed yet.[1][2]

• Secret links Files and folders can be shared with people who have never heard of Peergos through links that stay opaque to the server in transit. Links can carry an expiry date, a password, a fixed number of uses, or write access.[1]

• Built-in private apps Peergos ships a calendar, document editor, spreadsheet editor, PDF viewer and editor, media player, image gallery, task board, markdown browser, and wiki. Apps run in a strong sandbox, see only the file they were opened with, and cannot contact the network.[1]

• Open protocol standards The desktop app speaks WebDAV so tools like rclone work against the drive, plus CalDAV and CardDAV for calendars, tasks, and contacts in Thunderbird and phone apps. Android calendar and contact sync is automatic and bidirectional.[1][2]

• Self-hosting with portable identity The server is the same open-source software the vendor runs, free to operate on your own hardware while still sharing with users on any other server. Identity is not tied to a server: accounts can migrate with friends, files, and links intact, or mirror live to a spare.[1][2]

Who it fits

• Privacy-first individuals leaving Big Tech clouds will get the most from the hidden-names, hidden-sizes, hidden-graph model plus two published independent audits, which directly serve people whose threat model includes the provider itself.[1][2][3]

• Households syncing across Windows, Linux, and Android are well served by two-way folder sync, native mounts, and in-phone calendar and contact sync with no per-device fees.[1][2]

• Self-hosters who still want federation benefit from running the identical open-source server on their own disks while encrypted follow requests and secret links keep them connected to everyone else.[1][2]

Boundaries to check

• Drive mounting and the CalDAV and CardDAV bridges have explicitly not landed on macOS, so Apple-heavy setups lose core workflows and should evaluate that gap before committing.[1][2]

• The vendor server has no free tier as a matter of principle, so anyone unwilling to pay or self-host should look at free-tier competitors instead.[1]

• No enterprise support offering, SLA, or single sign-on integration is documented, so organisations with compliance checklists will find the record thin; the operator is a subscription- and donation-funded non-profit.[1][2]

Fit and compatibility