SafeShare
The facts below are what the maker publishes about SafeShare, checked and dated. Our editors have not written about it yet.
The facts
Each one read from SafeShare's own pages, with the date it was checked.
What it does
- Accounts and access
- Optional user accounts support invite-only registration, MFA, and SSO; the security guide also describes role-based access and anonymous uploads.checked 12 Oct 2026
- Administration
- An optional admin dashboard supports file management, user administration, and system configuration.checked 12 Oct 2026
- API access
- Yeschecked 23 Sep 2026
- At-rest encryption
- The README says configuring an encryption key enables AES-256 encryption at rest for stored files.checked 12 Oct 2026
- Authentication
- Optional user accounts support invite-only registration, role-based access, MFA, and SSO.checked 12 Oct 2026
- Compliance
- The deployment guide maps features to HIPAA, SOC 2, GDPR, and PCI-DSS requirements; it describes Fortress mode for regulated industries.checked 12 Oct 2026
- Compliance limits
- The README describes a Fortress mode for regulated industries but says PostgreSQL/S3 support and malware scanning are planned, not yet supported.checked 12 Oct 2026
- Deployment
- The README documents Docker deployment and a downloadable Linux amd64 binary, plus an installable PWA.checked 12 Oct 2026
- Deployment options
- The README gives Docker and Docker Compose deployment instructions and a Linux amd64 binary download.checked 12 Oct 2026
- Download tracking
- Yeschecked 23 Sep 2026
- Encryption at rest
- When configured, SafeShare encrypts stored files with AES-256-GCM; losing the encryption key means the files cannot be recovered.checked 12 Oct 2026
- Encryption limit
- End-to-end encryption keeps the whole file in browser memory twice and the documentation warns about files larger than 500 MB.checked 12 Oct 2026
- File controls
- Uploads can have automatic expiration, download limits, and password protection.checked 12 Oct 2026
- Integrations
- SafeShare provides an API with tokens, webhooks for file lifecycle events, and documented Prometheus monitoring.checked 12 Oct 2026
- Intended users
- The deployment guide names whistleblowers, journalists, activists, corporate file-transfer users, and organizations with compliance requirements as example audiences for different configurations.checked 12 Oct 2026
- Large files
- SafeShare supports resumable uploads and downloads for large files.checked 12 Oct 2026
- License
- The repository README identifies SafeShare as MIT licensed.checked 12 Oct 2026
- Metadata limit
- Metadata stripping does not support HEIC/HEIF, FLAC, WAV, OGG, WebM, or legacy Office formats, and does not remove Office comments or tracked changes.checked 12 Oct 2026
- Notable limit
- The repository says PostgreSQL, S3, and malware scanning are planned but not yet supported in Fortress mode.checked 12 Oct 2026
- Privacy features
- Anonymous mode redacts IP addresses from logs and the database, and metadata stripping can remove identifying metadata from supported file types.checked 12 Oct 2026
- Purpose
- SafeShare is a self-hosted file-sharing service with automatic expiration and no required accounts.checked 12 Oct 2026
- Security caveat
- The API reference says production deployments must run behind HTTPS.checked 12 Oct 2026
- Sharing controls
- Uploads can have expiration times, download limits, and optional password protection.checked 12 Oct 2026
Where it runs
- Browser encryption
- Optional end-to-end encryption encrypts files in the browser with AES-256-GCM before upload, so the server does not receive the plaintext or decryption key.checked 12 Oct 2026
