KURPOD mobile & desktop apps

Kurpod Logo

Key features

What kurpod can do - and what it can't.

Security features

Encryption

Kurpod uses standard public cryptography.

  • XChaCha20-Poly1305: File encryption
  • Argon2id: Password hashing (64 MiB memory, 3 iterations)
  • Built in Rust: Memory-safe implementation

Plausible deniability

Optional second encrypted volume with different password.

  • Dual-volume setup

    • Standard volume with one password
    • Hidden volume with different password
    • Both in same blob file
    • Hidden volume looks like random data

  • How it works

    • Reveal standard password if needed
    • Hidden volume remains undetectable
    • No proof second volume exists

Client-side encryption

Files encrypted in your browser before upload.

  • What server knows: Nothing about your files
  • What server stores: Encrypted blobs
  • Password: Never leaves your browser
  • Filenames: Encrypted too

Interface

Web UI

Basic file operations through your browser.

  • Upload: Drag and drop files
  • Organize: Create folders, move files
  • Preview: Images and PDFs
  • Search: Find files by name

Platform support

  • Server: Linux, macOS, Windows, Docker
  • Client: Any web browser (no plugins needed)

Performance

  • Streaming: Handles large files without eating RAM
  • Built in Rust: Fast and memory-safe

Deployment

Installation

  • Single binary: No dependencies, includes web UI
  • Storage: One blob file or directory of blobs
  • Config: Command line flags or environment variables

Beta status

  • Expect bugs: This is beta software
  • Self-hosted: No SaaS option

Docker

  • Official images: Available on GitHub Container Registry
  • Docker Compose: Example configurations included

Privacy

What we don't collect

  • No analytics or tracking
  • No accounts or registration required
  • No "phone home" to external servers

Self-hosted

  • Your server: Run on your own hardware
  • Your data: No third parties involved
  • Your network: Works offline/LAN-only if needed

API

REST API

  • Basic file operations via HTTP
  • Authentication with session tokens

Limitations

What kurpod can't do (yet):

  • Multi-user: Single user only
  • Collaboration: No real-time editing
  • Sync: No automatic syncing between devices
  • Mobile apps: Web interface only
  • Enterprise features: No user management, audit logs, etc.

This is beta software - expect bugs and missing features.