Menu

Tree [d4f81b] main /
 History

HTTPS access


File Date Author Commit
 .claude 1 day ago axpnet axpnet [d10d92] fix: remove accidentally committed cache/worktr...
 .github 1 day ago axpnet axpnet [d10d92] fix: remove accidentally committed cache/worktr...
 aur 2 days ago axpnet axpnet [a56505] chore(aur): update PKGBUILD and .SRCINFO to v3.2.5
 docs 1 day ago axpnet axpnet [212be0] docs(security): update audit report to March 20...
 icons 6 days ago axpnet axpnet [935cb8] docs: add Sigstore logo to README footer
 public 1 day ago axpnet axpnet [d5716b] chore(release): bump version to 3.2.6
 screenshots 1 day ago axpnet axpnet [d10d92] fix: remove accidentally committed cache/worktr...
 scripts 2026-02-20 axpnet axpnet [c4e023] fix(ci): add i18n scripts to repo for CI valida...
 shell_integration 2026-03-10 axpnet axpnet [8de7f8] feat(mime): add AeroVault MIME type icon and OS...
 snap 1 day ago axpnet axpnet [d5716b] chore(release): bump version to 3.2.6
 src 1 day ago axpnet axpnet [d4f81b] fix(security): mask credentials in activity log...
 src-tauri 1 day ago axpnet axpnet [d4f81b] fix(security): mask credentials in activity log...
 .gitignore 1 day ago axpnet axpnet [d10d92] fix: remove accidentally committed cache/worktr...
 .gitmodules 2026-01-18 axpnet axpnet [a04468] flatpak: Add complete source build manifest
 AGENTS.md 3 days ago axpnet axpnet [310228] v3.2.0: MEGA Native API, dual-backend, Windows ...
 AI-TRANSPARENCY.md 2026-03-24 axpnet axpnet [01710d] chore: migrate repository links from axpnet to ...
 CHANGELOG.md 1 day ago axpnet axpnet [d4f81b] fix(security): mask credentials in activity log...
 CODE_OF_CONDUCT.md 2026-03-23 axpnet axpnet [75e2ce] docs(conduct): add reporting email and issue pa...
 CONTRIBUTING.md 2026-03-24 axpnet axpnet [01710d] chore: migrate repository links from axpnet to ...
 LICENSE 2026-01-29 axpnet axpnet [701d1c] docs: cleanup and update community files
 PRIVACY.md 3 days ago axpnet axpnet [2e0fce] security: desktop security remediation (updater...
 README.md 1 day ago axpnet axpnet [d92e0f] docs(security): add Socket.dev supply chain mon...
 ROADMAP.md 1 day ago axpnet axpnet [7982a0] docs(roadmap): update to v3.2.6, add SourceForg...
 SECURITY.md 1 day ago axpnet axpnet [d4f81b] fix(security): mask credentials in activity log...
 cargo-sources.json 2026-01-18 axpnet axpnet [a04468] flatpak: Add complete source build manifest
 com.aeroftp.AeroFTP.desktop 2026-03-10 axpnet axpnet [75bf99] fix(snap): soften description for Snap Store co...
 com.aeroftp.AeroFTP.metainfo.xml 2 days ago axpnet axpnet [46a353] feat(share-link): advanced options (password/ex...
 com.aeroftp.AeroFTP.yml 2026-03-24 axpnet axpnet [01710d] chore: migrate repository links from axpnet to ...
 com.aeroftp.AeroVault.xml 2026-03-10 axpnet axpnet [8de7f8] feat(mime): add AeroVault MIME type icon and OS...
 index.html 2026-02-03 axpnet axpnet [012a44] docs(packaging): update app descriptions for v1...
 node-sources.json 2026-01-18 axpnet axpnet [a04468] flatpak: Add complete source build manifest
 package-lock.json 4 days ago axpnet axpnet [51864f] feat(ui): virtualize LargeIconsGrid with react-...
 package.json 1 day ago axpnet axpnet [d5716b] chore(release): bump version to 3.2.6
 postcss.config.js 2026-01-29 axpnet axpnet [d19a7c] chore: normalize trailing newlines in project c...
 tailwind.config.js 2026-01-29 axpnet axpnet [d19a7c] chore: normalize trailing newlines in project c...
 tsconfig.json 2026-01-29 axpnet axpnet [d19a7c] chore: normalize trailing newlines in project c...
 tsconfig.node.json 2026-01-29 axpnet axpnet [d19a7c] chore: normalize trailing newlines in project c...
 vite.config.ts 2026-03-16 axpnet axpnet [67fcb4] chore(release): v2.9.8 OpenDrive, Yandex Trash ...

Read Me

AeroFTP

AeroFTP Logo

FTP-First. Multi-Protocol. AI-Powered. Encrypted. Privacy-Enhanced.

The modern FTP client that grew into a complete file management platform. Multi-protocol, 6 integrated product modules, 47 languages, one app.

Website · Documentation · Download

Release License OpenSSF Best Practices Rust Report Card

Multi-Protocol Support AI Providers AI Tools Languages AES-256 Encryption CLI Ready Agent Ready

Tauri 2 Rust React 18 TypeScript Linux Windows macOS

Snap Store AUR Launchpad Winget AppImageHub

OIN Community Member Awesome Tauri Gitster AlternativeTo Buy Me a Coffee GitHub Sponsors


FTP-First Design

AeroFTP is an FTP client first. Full encryption support with configurable TLS modes (Explicit AUTH TLS, Implicit TLS, opportunistic TLS), certificate verification control, MLSD/MLST machine-readable listings (RFC 3659), and resume transfers (REST/APPE). It then extends this foundation into a broad multi-protocol file management platform through six integrated product modules - the Aero Family.


The Aero Family

AeroFTP
├── AeroCloud    - Personal cloud (25 protocols, sync, share)
├── AeroFile     - Professional file manager
├── AeroSync     - Bidirectional sync engine
├── AeroVault    - Military-grade encryption
├── AeroTools    - Code editor + Terminal + AI chat
   └── AeroAgent    - AI-powered assistant (47 tools, 19 providers)
├── AeroFTP CLI  - Production command-line client (vault profiles, JSON output, batch scripting, agent discovery)
└── AeroPlayer   - Media player with visualizers

AeroCloud - Your Personal Cloud

Full documentation →

Turn any server into a private personal cloud. Reliable sync across the mature AeroCloud protocol set (including SFTP, S3, Azure, WebDAV, Google Drive, Dropbox, OneDrive, Jottacloud, kDrive, Koofr, and OpenDrive), plus additional provider integrations tracked in the protocol matrix. Bidirectional sync, tray background sync, selective sync, file versioning, .aeroignore, share links, and per-project local folders.

Protocol Encryption Features
FTP None / Explicit TLS / Implicit TLS MLSD/MLST (RFC 3659), resume transfers, TLS mode selection
FTPS TLS/SSL (Explicit + Implicit) Certificate verification options, self-signed cert support
SFTP SSH Key authentication, host key verification (TOFU), ed25519/RSA, hybrid upload (SCP)
WebDAV HTTPS Nextcloud, Felicloud, CloudMe, Koofr, Jianguoyun, InfiniCLOUD, Seafile. HTTP Digest auth (RFC 2617), file locking (RFC 4918), OCS share links + trash for Nextcloud-based servers
S3 HTTPS AWS S3, MEGA S4, MinIO, Backblaze B2, Wasabi, Cloudflare R2, Alibaba OSS, Tencent COS. Multipart upload
Google Drive OAuth2 PKCE File versions, thumbnails, share links (view/comment/edit permissions), workspace export
Dropbox OAuth2 PKCE File versions, thumbnails, share links (password + expiry on Pro+)
OneDrive OAuth2 PKCE Resumable upload, file versions, share links (password on Personal, expiry)
MEGA.nz Client-side AES 20GB free, end-to-end encrypted, zero-knowledge, share links
Box OAuth2 PKCE 10GB free, enterprise-grade, file versions, share links (password + expiry on paid plans)
pCloud OAuth2 10GB free, US/EU regions, file versions, share links (password + expiry on Premium)
Azure Blob HMAC-SHA256 / SAS Enterprise blob storage, container-based, XML API
4shared OAuth 1.0 (HMAC-SHA1) 15GB free, native REST API, folder/file management
Filen Client-side AES-256-GCM 10GB free, zero-knowledge E2E encryption, share links (password + expiry presets)
Internxt Drive Client-side AES-256-CTR 1GB free, E2E encrypted, BIP39 mnemonic, optional 2FA
kDrive API Token (Bearer) 15GB free, Swiss-hosted by Infomaniak, share links (password + expiry on paid plans)
Zoho WorkDrive OAuth2 5GB free, 8 regional endpoints, share links (password + expiry), team drive management
Jottacloud Login Token (Bearer) 5GB free, Norwegian-hosted, share links, unlimited storage plans
Koofr OAuth2 PKCE 10GB free, EU-based (Slovenia), native REST API, share links, trash management
Felicloud WebDAV + OCS API 10GB free, EU/GDPR, Nextcloud-based, share links (password + expiry), trash management
FileLu API Key (native REST) 1GB free, file/folder passwords, privacy toggle, share links, server clone, remote URL upload, trash management
Yandex Disk OAuth2 Token 5GB free, Russian cloud storage, share links, trash management, MD5 checksums, server-side copy
OpenDrive Username/Password 5GB free, session-based auth, MD5 checksums, trash management, share links (expiry)
GitHub PAT / Device Flow Repository as filesystem, single-file commits plus atomic batch upload/delete flows, release assets (2 GiB), branch workflow for protected branches, auto PR creation
SourceForge SSH (SFTP) Coming soon - SFTP preset with SourceForge project paths, file release management

Cloud features: Background sync via cloud provider factory (direct-auth, OAuth2, OAuth1) with maturity badges shown in the setup wizard. 4-step setup wizard with saved server profiles, selective sync (folder exclusion), .aeroignore patterns, file versioning (.aeroversions/), sync index cache for conflict detection, storage quota display where the provider exposes it, share links, and Dropbox-style conflict naming.

Native OS File Manager Badges (v2.0.4+): Green checkmark on synced files, blue arrows on syncing files, red X on errors - directly inside Nautilus, Nemo, and GIO-based file managers on Linux. On Windows (v2.0.5), native Explorer sync icons via Cloud Filter API with Named Pipe IPC server. Tray icon with colored badge dots (checkmark/sync arrows/X mark overlays). One-click install on Linux, automatic on Windows.


AeroFile - Professional File Manager

Full documentation →

A full-featured local file manager built into AeroFTP. Toggle between remote and local modes, or use both side-by-side.

  • Places Sidebar: Nautilus-style with user directories, custom locations, recent locations (with per-item delete), mounted drives with usage bars, GVFS network shares (SMB/SFTP/NFS/WebDAV), unmounted partition detection with one-click mount, EFI/swap/recovery hidden, and folder tree toggle (Ctrl+B)
  • Breadcrumb Navigation: Clickable path segments with chevron dropdown for sibling browsing, overflow collapse, and edit mode (Ctrl+L)
  • 3 View Modes: List (detailed table), Grid (icon thumbnails), Large Icons (96px with full thumbnails). Toggle via Ctrl+1/2/3
  • Drive Detection: Cross-platform volume detection (internal, removable, network, optical) with filesystem type, free/total space, and colored usage bars
  • Customizable Columns: Show/hide Size, Type, Permissions, Modified columns per preference. Sort folders first and file extension visibility toggles
  • Quick Look: Press Space to preview any file - images, video, audio, code with syntax highlighting, markdown. Arrow keys navigate between files without closing
  • Properties Dialog: Tabbed UI with General (3 dates, symlink target), Permissions (rwx matrix, octal, owner:group), and Checksum (MD5, SHA-1, SHA-256, SHA-512)
  • Trash Browser: Soft delete to system trash by default. Browse trash contents, restore individual files, or empty trash. Full trash lifecycle management
  • Duplicate File Finder: Content-aware duplicate detection (size grouping + MD5 hash). Interactive dialog with KEEP/DELETE/SKIP per file and batch delete
  • Disk Usage Treemap: Visual disk space analysis with squarified treemap algorithm. Click to drill down into directories, breadcrumb navigation, hover details
  • Batch Rename: Find/Replace, Prefix, Suffix, Sequential numbering with live preview and conflict detection
  • Inline Rename: Click filename or press F2 to rename directly in file list
  • File Clipboard: Cut/Copy/Paste with cross-panel transfers (local-to-remote and vice versa)
  • Drag and Drop: Cross-panel drag for upload/download, intra-panel drag for move
  • CompressDialog: Unified compression UI with format selection, levels, and password protection
  • Resizable Preview Panel: Image thumbnails, file info, dimensions, path display
  • 20+ Keyboard Shortcuts: Space preview, F2 rename, Delete, Ctrl+C/V, Ctrl+B sidebar, Ctrl+L edit path, Alt+Enter properties, and more

AeroSync - Bidirectional Sync Engine

Full documentation →

Enterprise-grade file synchronization with operational reliability features built for real-world use.

  • Smart Sync: 3 intelligent conflict resolution modes - overwrite if newer, overwrite if different, skip if identical
  • Sync Profiles: 3 built-in presets (Mirror, Two-way, Backup) plus custom save/load. Each profile bundles direction, compare options, retry/verify policies, and delete behavior
  • Conflict Resolution Center: Per-file resolution strategies (keep local, keep remote, skip) with batch actions - Keep Newer for All, Keep Local for All, Keep Remote for All
  • Bandwidth control: Upload and download speed limits (128 KB/s to 10 MB/s) directly in the sync panel
  • Transfer journal with checkpoint/resume: Persistent journal tracks every sync operation. Interrupted syncs resume from where they left off. Auto-cleanup after 30 days
  • SHA-256 checksum verification: Content-based comparison with streaming 64KB-chunk hashing during scan phase
  • Post-transfer verification: 4 policies (None, Size, Size+Time, Full) confirm transfer integrity after each download
  • Configurable retry with exponential backoff: Per-file retry policy with base delay, max delay cap, backoff multiplier, and per-file timeout
  • Structured error taxonomy: 10 error categories (Network, Auth, PathNotFound, PermissionDenied, QuotaExceeded, RateLimit, Timeout, FileLocked, DiskError, Unknown) with retryability hints
  • Error breakdown in sync report: Post-sync report groups errors by category with dedicated icons
  • Navigation boundary warning: Visual amber warning when browsing outside active sync paths
  • AeroCloud integration: Tray background sync, share links, native OS file manager badges

AeroVault - Military-Grade Encryption

Full documentation →

Crates.io
docs.rs

Create, manage, and browse encrypted containers that protect your files with a security stack that exceeds industry standards. The encryption engine is published as the standalone aerovault crate on crates.io for use in any Rust project.

AeroVault v2 (.aerovault containers)

Component Algorithm Details
Content encryption AES-256-GCM-SIV (RFC 8452) Nonce misuse-resistant - even nonce reuse doesn't compromise security
Key wrapping AES-256-KW (RFC 3394) Built-in integrity check on unwrap
Filename encryption AES-256-SIV Deterministic - file names are hidden, not just content
Key derivation Argon2id 128 MiB memory / 4 iterations / 4 parallelism (exceeds OWASP 2024)
Header integrity HMAC-SHA512 512-bit MAC, quantum-resistance margin
Cascade mode ChaCha20-Poly1305 Optional double encryption layer for defense-in-depth
Chunk size 64 KB Per-chunk random nonce + authentication tag

Open format: The .aerovault binary format is fully documented in the AeroVault v2 Specification with implementation guides for Rust, Java, Python, Go, C, and JavaScript.

Additional encryption features:

  • Directory support: Create nested folders inside vaults with encrypted directory entries, hierarchical navigation, and recursive delete
  • Cryptomator: Create and browse Cryptomator format 8 vaults (scrypt + AES-SIV + AES-GCM) via context menu
  • Archive Browser: Browse ZIP, 7z, TAR, RAR contents in-app without extracting. Selective single-file extraction
  • Archive Encryption: ZIP and 7z with AES-256 password protection. Compression levels (Store/Fast/Normal/Maximum)

AeroTools - Code Editor, Terminal & AI Chat

Full documentation →

The integrated development panel combining three tools in a tabbed interface.

  • Monaco Editor (VS Code engine): Syntax highlighting for 50+ languages, remote file editing, 4 editor themes matching app themes
  • Integrated Terminal: SSH remote shell with 8 terminal themes, multiple tabs, auto-sync with app theme
  • AeroAgent AI Chat: Full AI assistant panel (see below)
  • Bidirectional sync: Editor and AI agent edits flow in both directions in real time

AeroAgent - AI-Powered Assistant

An AI assistant with 47 provider-agnostic tools that work across local files and AeroFTP's remote provider backends. 19 AI providers, vision support, RAG indexing, plugin ecosystem with GitHub registry, and command palette.

Providers: OpenAI, Anthropic, Google Gemini, xAI Grok, OpenRouter, Ollama, Kimi (Moonshot), Qwen (Alibaba), DeepSeek, Mistral, Groq, Perplexity, Cohere, Together AI, AI21 Labs, Cerebras, SambaNova, Fireworks AI, Custom

Core capabilities:

  • File operations: List, read, search, create, edit, rename, delete - local and remote
  • Batch transfers: Multi-file upload/download with sync preview
  • Find and replace: Edit text in local and remote files directly from chat
  • Native function calling: OpenAI tools[], Anthropic tool_use, Gemini functionDeclarations
  • Streaming responses: Real-time incremental rendering for all providers
  • Context-aware: Knows your connected server, current paths, selected files, and protocol
  • Vision/Multimodal: Attach images for analysis - GPT-4o, Claude, Gemini, Ollama llava

Advanced features:

  • RAG integration: Auto-indexes workspace files; full-text search across your codebase
  • Plugin system: Extend with custom tools via JSON manifest + shell scripts (sandboxed, 30s timeout). Browse and create plugins
  • Multi-step autonomous tools: Chains multiple tool calls with auto-resume after approval
  • Ollama auto-detection: Discovers local Ollama instances and available models
  • Monaco bidirectional sync: Live two-way sync between code editor and AI agent
  • Terminal command execution: Run terminal commands from chat with user approval
  • Conversation export: Export chat as Markdown or JSON
  • Prompt template library: 15 built-in templates with / prefix activation
  • Streaming markdown: Real-time rendered markdown with code block actions (Copy/Apply/Diff/Run)
  • Thinking visualization: See AI reasoning process with token count and duration
  • Cost budget tracking: Per-provider monthly limits with conversation-level cost display
  • Chat search: Ctrl+F overlay with role filter and keyboard navigation
  • Command Palette: Ctrl+Shift+P for quick access to all app actions
  • Plugin ecosystem: GitHub-based registry with SHA-256 integrity, event hooks, browser UI
  • Context menu AI: Right-click any file → "Ask AeroAgent" for instant analysis
  • Drag & drop to chat: Drop files into AeroAgent for analysis

Agent-Ready by Design

Full documentation →

AeroFTP is built for both humans and AI agents. As agentic AI, computer use, and autonomous coding assistants become the standard way to interact with computers, AeroFTP provides native interfaces for both use cases.

For AI Agents (CLI): Tools like Claude Code, Open Interpreter, Cline, Aider, Devin, Codex, Cursor Agent, Windsurf, and other agentic frameworks can call aeroftp-cli directly. Structured --json output, vault-based --profile credentials (agents never see passwords), semantic exit codes, and .aeroftp batch scripts make AeroFTP a first-class tool in any agent's toolkit. External agents can also invoke aeroftp-cli agent to orchestrate AeroAgent as a credential-isolating proxy for multi-server operations. See Agent Orchestration for the full orchestration guide, CLI reference, and a verified field test report.

For Humans (GUI + AeroAgent): The desktop app provides drag-and-drop file management with AeroAgent, the integrated AI assistant offering 48 tools across local files and remote providers. AeroAgent supports multi-step autonomous execution, tool approval workflows with backend-enforced grants, and 19 AI providers.


AeroFTP CLI - Command-Line Client

Full documentation →

A production command-line interface sharing the same Rust backend as the GUI. It provides structured JSON output, glob pattern transfers, encrypted vault profiles, batch scripting, and agent discovery across the supported URL schemes and saved-profile providers.

# Zero-credential connection via saved profiles
aeroftp-cli ls --profile "My Server" /var/www/ - l

# List all saved servers from encrypted vault
aeroftp-cli profiles

# URL-based connection (classic mode)
aeroftp-cli ls sftp://user@myserver.com /var/www/ - l

# Download with glob patterns
aeroftp-cli get sftp://user@host "/data/*.csv"

# Pipe-friendly: data on stdout, messages on stderr
aeroftp-cli cat sftp://user@host /config.ini | grep DB_HOST

# OAuth providers via profile (Google Drive, Dropbox, OneDrive, etc.)
aeroftp-cli ls --profile "My Google Drive" /

Commands: connect, ls, get, put, mkdir, rm, mv, cat, head, tail, touch, hashsum, check, find, stat, df, tree, about, dedupe, sync, link, batch, profiles

Protocols: FTP, FTPS, SFTP, WebDAV, S3, GitHub, MEGA, Azure, Filen, Internxt, Jottacloud, FileLu, Koofr, OpenDrive, Yandex Disk, Felicloud + OAuth providers via --profile (Google Drive, Dropbox, OneDrive, Box, pCloud, Zoho WorkDrive, kDrive, 4shared)

Features:

  • --profile vault profiles - connect to any saved server without exposing credentials. Fuzzy name matching with disambiguation. Designed for AI agent workflows
  • --json structured output for all commands
  • Glob pattern transfers (*.csv, *.json)
  • .aeroftp batch scripts with variables, error policies, and 17 commands
  • Progress bars with speed and ETA
  • NO_COLOR / CLICOLOR compliance
  • Password via stdin, env vars, or interactive prompt
  • SSH key authentication for SFTP

See the full CLI Guide for usage, examples, profiles, and batch scripting reference.

AI Agent & CI/CD Integration

AeroFTP CLI is designed for autonomous use by AI coding agents and CI/CD pipelines. The --profile flag is the key enabler - agents connect to servers without ever seeing passwords:

  • --profile "Name" - connect via encrypted vault, zero credentials in the command line, shell history, or process list
  • --json on every command - structured output parsable by any agent (Claude Code, Codex, Cursor, Devin)
  • Semantic exit codes (0-8) - agents know exactly what failed without parsing text
  • NO_COLOR compliant - no ANSI escape sequences polluting agent output
  • stderr/stdout separation - data on stdout for piping, errors on stderr for logging
  • Batch scripts (.aeroftp) - define multi-step deployment flows as files, execute atomically
# AI agent deploys a website - no credentials anywhere
aeroftp-cli put --profile "Production" ./dist/app.js /var/www/app.js
aeroftp-cli sync --profile "Staging" ./build/ /var/www/ --dry-run

# CI/CD with env-based vault unlock
AEROFTP_MASTER_PASSWORD=$SECRET aeroftp-cli put --profile "Deploy" ./dist/ /www/ - r

AeroAgent (the built-in AI assistant) can also orchestrate remote server operations via server_exec tool - listing files, reading configs, uploading/downloading across any saved server, with credentials resolved securely from the vault.

Credential Isolation for AI Agents

As of March 2026, no other file transfer client, cloud storage CLI, or multi-protocol transfer tool provides native credential isolation for AI agents operating on remote servers. Existing tools in this category store credentials in plaintext files, reversible encodings, or OS keystores accessible to any same-user process. Credential proxy services that have emerged for AI workflows only cover HTTP APIs - they cannot handle FTP, SFTP, WebDAV, or OAuth token refresh cycles.

AeroFTP solves this at the architecture level. The --profile flag and AeroAgent server_exec tool resolve credentials exclusively inside the Rust backend process, from an AES-256-GCM encrypted vault. The credential material never crosses the IPC boundary - the agent receives only operation results, never the authentication material that produced them. This works across direct-auth, token-based, and browser-authorized cloud providers.

Read the full analysis: Credential Isolation - architecture, protocol coverage, and implementation references. See also Agent Orchestration for the complete orchestration guide with external agent integration and verified field test report.


AeroPlayer - Media Engine

Full documentation →

Built-in media player with GPU-accelerated visualizations and professional audio processing.

  • 14 visualizer modes: 8 Canvas 2D + 6 WebGL 2 GPU shader modes (Wave Glitch, VHS, Mandelbrot, Raymarch Tunnel, Metaball, Particles)
  • 10-band graphic EQ: Real Web Audio BiquadFilterNode per band (32Hz-16kHz) with 10 presets and stereo balance
  • Beat detection: Onset energy algorithm driving beat-reactive effects across all modes
  • WebGL shader engine: 6 GLSL fragment shaders - GPU-accelerated ray marching, metaballs, fractals, particles
  • Post-processing: Vignette, chromatic aberration, CRT scanlines, glitch effects
  • Resilient startup buffering: First Play now queues during prebuffer and auto-starts when ready
  • Zero dependencies: Native HTML5 <audio> + Web Audio API

Privacy-Enhanced

AeroFTP incorporates privacy protections that go beyond what traditional file managers offer.

Feature Details
Master Password Optional Argon2id vault encryption - all credentials locked behind a single password
Encrypted Vault All sensitive data in AES-256-GCM encrypted storage - zero plaintext on disk
Zero Telemetry No analytics, no phone-home, no network requests beyond user-initiated connections
Memory Zeroization Passwords and keys cleared from RAM immediately after use
Clearable History One-click clear for recent locations. No persistent browsing traces
Portable Deployment AppImage runs without installation. Remove it and the config directory - no traces remain

See SECURITY.md for the security policy and architecture summary, and docs.aeroftp.app/security for the complete security documentation with encryption specs, AI security model, supply chain details, and audit history.

Security Posture

OpenSSF Best Practices 100% passing - all 67 criteria met
Aikido Security Continuous SAST/SCA monitoring - Top 5% benchmark, OWASP Top 10 coverage, 0 open issues
Socket.dev Supply chain SCA monitoring on every push - dependency risk scoring, typosquatting detection
Dependency Scanning 1,156 packages monitored (320 JS + 836 Rust), daily automated scans
Supply Chain All GitHub Actions pinned to SHA hashes, Dependabot enabled, Sigstore signing with client-side verification
Security Audits 300+ findings resolved across 9 independent audits - grade A-
Security Audit March 2026 - February 2026 (Aikido Security)

Additional Features

4 Themes

Light, Dark, Tokyo Night, and Cyber - with themed icons, terminal colors, Monaco editor syntax, and CSS custom properties throughout.

Security Toolkit (Cyber theme)

Hash Forge (MD5, SHA-1, SHA-256, SHA-512, BLAKE3), CryptoLab (AES-256-GCM, ChaCha20-Poly1305 encrypt/decrypt), Password Forge (CSPRNG + BIP39 passphrase generator with entropy display).

47 Languages at 100% Coverage

Quality-audited translations with native script integrity. Automatic browser language detection.

🇬🇧 English 🇮🇹 Italian 🇩🇪 German 🇪🇸 Spanish 🇫🇷 French
🇵🇹 Portuguese 🇷🇺 Russian 🇯🇵 Japanese 🇰🇷 Korean 🇨🇳 Chinese
🇮🇳 Hindi 🇧🇩 Bengali 🇹🇷 Turkey 🇵🇱 Polish 🇳🇱 Dutch
🇸🇪 Swedish 🇩🇰 Danish 🇳🇴 Norwegian 🇫🇮 Finnish 🇮🇸 Icelandic
🇨🇿 Czech 🇭🇺 Hungarian 🇷🇴 Romanian 🇺🇦 Ukrainian 🇬🇷 Greek
🇹🇭 Thai 🇻🇳 Vietnamese 🇮🇩 Indonesian 🇲🇾 Malay 🇵🇭 Filipino
🇰🇭 Khmer 🇬🇪 Georgian 🇦🇲 Armenian 🇧🇬 Bulgarian 🇭🇷 Croatian
🇷🇸 Serbian 🇸🇰 Slovak 🇸🇮 Slovenian 🇲🇰 Macedonian 🇪🇪 Estonian
🇱🇹 Lithuanian 🇱🇻 Latvian 🏴󠁧󠁢󠁷󠁬󠁳󠁿 Welsh Catalan Galician
Basque 🇰🇪 Swahili

Auto-Updater

  • In-app download with progress bar showing speed and ETA
  • "Install & Restart" for .deb, .rpm, and AppImage - detached relaunch survives parent exit
  • Non-intrusive update toast with auto-dismiss (StatusBar badge for persistent access)
  • Periodic background check every 24 hours

Installation

Linux

Snap Store

sudo snap install aeroftp

Get it from the Snap Store

Note: Snap has limited filesystem access due to strict confinement. For full access, use .deb, .AppImage, or AUR.

AUR (Arch Linux)

yay - S aeroftp-bin
# or
paru - S aeroftp-bin

Get it from AUR

Available on Arch Linux and derivatives (Manjaro, EndeavourOS, Garuda). Binary package - no compilation needed.

Launchpad PPA (Ubuntu / Debian)

Visit launchpad.net/aeroftp for PPA instructions and .deb packages.

Other Linux Formats

Download from GitHub Releases:

  • .deb - Ubuntu, Debian, Linux Mint, Pop!_OS
  • .rpm - Fedora, openSUSE, RHEL
  • .AppImage - Portable, runs on any distro (AppImageHub)

Windows

Winget

winget install axpnet.AeroFTP

Get it from Winget

Available on Windows 10 (1709+) and Windows 11. Requires App Installer from Microsoft Store.

Other Windows Formats

Download from GitHub Releases:

  • .exe - NSIS installer
  • .msi - Windows Installer

Note: Windows builds are not currently published on the Microsoft Store. The installer is not code-signed (no EV certificate), so Windows SmartScreen may show a warning on first run - this is safe to dismiss.

macOS

Download from GitHub Releases:

  • .dmg - Universal disk image

Note: The macOS build is not notarized (no Apple Developer certificate). macOS Gatekeeper will block the app on first launch - right-click the app and select "Open" to bypass. See #47 for known issues on Apple Silicon.

Verifying Release Integrity

All release artifacts are signed with Sigstore using keyless signing via GitHub OIDC. Each release includes .sigstore.json verification bundles.

Install cosign, then verify any downloaded artifact:

cosign verify-blob \
  --bundle AeroFTP_3.1.3_amd64.deb.sigstore.json \
  --certificate-identity "https://github.com/axpdev-lab/aeroftp/.github/workflows/build.yml@refs/tags/v3.1.3" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  AeroFTP_3.1.3_amd64.deb

This proves the artifact was built by our CI pipeline from the tagged commit. Replace filenames and version with your download.


Support the Project

AeroFTP is free and open source software. If you find it useful, please consider supporting its development:

Donate

Cryptocurrency

  • Bitcoin (BTC): bc1qdxur90s5j4s55rwe9rc9n95fau4rg3tfatfhkn
  • Ethereum (ETH/EVM): 0x08F9D9C41E833539Fd733e19119A89f0664c3AeE
  • Solana (SOL): 25A8sBNqzbR9rvrd3qyYwBkwirEh1pUiegUG6CrswHrd
  • Litecoin (LTC): LTk8iRvUqAtYyer8SPAkEAakpPXxfFY1D1

Contributing

Contributions are welcome. Please open an issue to discuss proposed changes before submitting a pull request.


License

GPL-3.0 - See LICENSE for details.


OpenSSF Best Practices

OIN 2.0 Community Member Open Source Initiative Member Sigstore Signed
OIN 2.0 Community Member OSI Individual Member Sigstore Signed Releases

Built with Rust (Tauri 2) + React 18 + TypeScript


Designed, architected and maintained by axpnet.
AI tools (Claude Code, Codex, Gemini) were used extensively for translations, code review,
implementation and documentation, always under strict human-defined specifications and patterns.
Every feature, design decision and architectural choice is human-driven.
AI accelerated development; it did not direct it.
Full AI Transparency Statement

MongoDB Logo MongoDB