Lufi
The facts below are what the maker publishes about Lufi, checked and dated. Our editors have not written about it yet.
The facts
Each one read from Lufi's own pages, with the date it was checked.
What it does
- API access
- Yeschecked 23 Sep 2026
- Clients
- Lufi offers a web interface, a CLI client, and a Python client.checked 5 Oct 2026
- Command-line clients
- The project links to a CLI client installable through npm and to a separate Python client.checked 12 Oct 2026
- Contributions
- The project invites issue reports, internationalization help, and code contributions.checked 12 Oct 2026
- Demo instance
- The project links to a demonstration site and says it has strong time and file-size limitations.checked 12 Oct 2026
- Demo limits
- The project links to a demonstration site and says it has strong limits on time and file size.checked 5 Oct 2026
- Deployment
- The project includes an Ansible role and Terraform plan for deployment, and documents Docker deployment through a separate recipe.checked 5 Oct 2026
- Encryption
- Encryption and decryption happen in the browser, and the encryption key is never sent over the network.checked 5 Oct 2026
- Encryption key
- The encryption key is kept in the URL fragment and is never sent over the network.checked 12 Oct 2026
- Languages
- The project says Lufi comes with several languages.checked 12 Oct 2026
- License
- Lufi is licensed under the AGPL.checked 12 Oct 2026
- Metadata
- The file name, size, and MIME type are sent unencrypted.checked 5 Oct 2026
- Mobile support
- The project says it has been tested on iOS devices, including iPad and iPhone, and Android devices, including Galaxy Tab and Galaxy S8.checked 12 Oct 2026
- No bounty
- The security policy says Lufi has no bounty program at this time.checked 5 Oct 2026
- Purpose
- Lufi is end-to-end encrypted file-sharing software that stores files and lets recipients download them.checked 12 Oct 2026
- Security support
- Only the latest Lufi release is supported and receives security fixes; vulnerabilities in the develop branch may also be reported.checked 5 Oct 2026
- Self-hosting
- Deployment options described include an Ansible role, a Terraform plan for AWS, and a Docker recipe.checked 12 Oct 2026
- Support and contributions
- The README invites users to report issues, help with internationalization, and contribute code.checked 5 Oct 2026
- Unencrypted metadata
- The file name, size, and MIME type are sent unencrypted.checked 12 Oct 2026
- Vulnerability reports
- The security policy directs vulnerability reports to a confidential issue on the project's Framagit instance.checked 5 Oct 2026
Where it runs
- Browser compatibility
- The README lists Firefox, Chrome, Internet Explorer 11, Edge, Safari, and iOS and Android devices as tested and working.checked 5 Oct 2026
- Browser encryption
- Files are encrypted and decrypted in the browser, so they do not leave the user's computer unencrypted.checked 12 Oct 2026
- Browser support
- The project lists Firefox, Chrome, Internet Explorer 11, Microsoft Edge, and Safari as tested browsers.checked 12 Oct 2026
