Your server, your data
Files are stored on infrastructure you control, in the country you choose — not with a transfer service.
Self-hosted · Open source
Your own secure upload platform
SealShare is file sharing software you install on your own server. Your company gets its own upload page to send files to customers and receive files from them — encrypted at rest, on your domain, without relying on an outside service.
- No accounts for customers
- Encrypted at rest
- One Docker image
Why run your own
Stop routing your customers' files through someone else's service
Transfer services are quick, but every file you exchange with a customer ends up on their servers, under their terms. SealShare is a simple setup for your own upload platform: a secure way to get data from customers and share data with them, entirely under your control.
No accounts for customers
Customers open a link and download. Nobody has to sign up anywhere.
Your name on it
Your domain, and your logo, title and description on the upload page.
No per-user pricing
Open source under the MIT licence. Use it for the whole company, without seats or subscriptions.
How it works
Three steps, for you and for the people you share with.
-
Upload
Drop files or whole folders. Add a password, an expiry and a download limit if you want.
-
Share
Copy the link, show it as a QR code, or send it from your phone's share sheet.
-
Download
Your customer opens the link and downloads single files or everything as a ZIP. Expired shares delete themselves.
Features
Everything a file exchange with customers needs
And nothing that turns it into a project: SealShare runs from a single container and is set up in a few minutes. It follows your system's light or dark theme, on desktop and phone.
Files and folders
Drag & drop or browse; folders keep their structure, with live upload progress.
A link per share
Every upload gets its own random, hard-to-guess link.
QR code and share sheet
Show the link as a QR code, save it as a PNG, or pass it to the phone's share sheet.
Password protection
Protect a share with a password; its encryption key is derived from it.
Encrypted at rest
Encrypted at rest with AES-256-GCM; with a share password the key is never stored.
Expiry
From 1 hour to 30 days, or never when the admin allows it.
Download limits
Close a share after a set number of downloads.
ZIP download
Recipients download everything in one archive.
Automatic clean-up
Expired shares and their files are deleted every hour.
Admin dashboard
Every share with its size, downloads and expiry; storage use at a glance.
Limits and quota
Maximum file and share size, files per share, storage quota, default expiry.
Your branding
Your logo, site title and description on the upload page.
System password
Optionally close the upload page to everyone who does not have the password.
Two-factor sign-in
Admins protect their accounts with authenticator app codes.
One Docker image
FrankenPHP with Laravel Octane, automatic TLS and SQLite — no separate database.
See it in action
The same interface on a laptop and a phone, in light or dark.
-
Upload files and foldersDrag & drop, then set a password, an expiry and a download limit. -
Share the linkCopy it, show it as a QR code or send it from the share sheet. -
A QR code for the linkScan it from the screen, or save it as a PNG. -
Your customer downloadsSingle files or everything as a ZIP, without an account. -
Admin dashboardEvery share, its size, downloads and expiry at a glance. -
Admin settingsUpload limits, storage quota, your logo and title.
-
Upload from a phoneThe same upload page, sized for one hand. -
Password-protected sharesRecipients enter the password to open a share. -
Download on the goFiles and a ZIP of all of them. -
Scan to openThe QR code fills the screen.
Compare
How SealShare compares
Hosted transfer services keep your files on their servers; other self-hosted tools do the same job in their own way. Every value below comes from the product's own website, documentation or repository.
Hosted transfer services
Quick to use, but the files sit with the provider, under the provider's terms.
| Criterion | SealShare | WeTransfer | SwissTransfer | Dropbox Transfer | Google Drive links |
|---|---|---|---|---|---|
| Files stored | Your server | WeTransfer's cloud (EU or US) | Infomaniak, Switzerland | Dropbox's cloud (US by default) | Google's cloud |
| Operated by | You | WeTransfer | Infomaniak | Dropbox | |
| Recipient needs an account | No | No | No | No | No, with “Anyone with the link” |
| Password protection | Yes | Yes1 | Yes | Standard plan and up | — |
| Link expiry | Yes, 1 hour to 30 days, or never | Up to 3 or 7 days on Free1 | 1 to 30 days4 | 7 days; custom on Standard and up | Work or school accounts only |
| Download limit | Yes | — | Yes, 1 to 250 | — | — |
| Encryption at rest | Yes, AES-256-GCM | Yes, AES-256 | Yes, AES-256 | Yes, AES-256 | Yes, AES-256 |
| End-to-end encryption | No | Enterprise add-on | No | No | Higher Workspace editions |
| Folder upload | Yes | No, folders are flattened | Yes | Yes | Yes |
| Custom branding | Yes: logo, title, description | Ultimate plan and up | Through paid kDrive | Standard plan and up | — |
| Maximum file size | Set by you (server limits) | 3 GB or 100 GB a month on Free1 | 50 GB per transfer | 2 GB on Basic (free) | 15 GB of free storage |
| Licence and cost | MIT, free | Free (non-commercial use); Starter USD 8/month2 | Free | Free; Plus EUR 11.99/month2 | Free; 100 GB CHF 2/month2 |
| QR code for the link | Yes | — | — | — | — |
Self-hosted share tools
Open-source apps you run yourself, like SealShare. Included are single-purpose tools that install with Docker and had a release in the last 12 months.
| Criterion | SealShare | Pingvin Share X | PsiTransfer | Gokapi | Erugo |
|---|---|---|---|---|---|
| Files stored | Your server | Your server or S3 | Your server | Your server or S3 | Your server |
| Operated by | You | You | You | You | You |
| Recipient needs an account | No | No | No | No | No |
| Password protection | Yes | Yes | Yes | Yes | Yes |
| Link expiry | Yes, 1 hour to 30 days, or never | Yes, up to a maximum you set | Yes, 1 hour to 8 weeks | Yes, after days or downloads | Yes, 7 days by default |
| Download limit | Yes | View limit only | One-time download only | Yes | Yes |
| Encryption at rest | Yes, AES-256-GCM | No | No | Optional | No |
| End-to-end encryption | No | No | No | Optional | No |
| Folder upload | Yes | Yes | No | No, files are listed singly3 | Yes, keeps structure |
| Custom branding | Yes: logo, title, description | Yes: logo, name, colours, CSS | Yes, by editing templates | Yes: logo, CSS, JavaScript | Yes: logo, colours, themes |
| Maximum file size | Set by you (server limits) | Set by you (1 GB per share by default) | Set by you (no limit by default) | Set by you (100 GB by default) | Set by you (2 GB per share by default) |
| Licence and cost | MIT, free | BSD-2-Clause, free | BSD-2-Clause, free | AGPL-3.0, free | MIT, free |
| QR code for the link | Yes | Yes | Yes | Yes | No |
SealShare encrypts files on the server as they arrive. With a share password the key is never stored; without one it is kept in SealShare's database. A value marked “—” could not be confirmed from the product's own sources. Checked on 13 September 2026.
1 WeTransfer's pricing page and its help centre disagree. The pricing page lists password protection on every plan, expiry up to 7 days and up to 100 GB a month on Free; the help centre (May 2026) lists password protection under Ultimate, expiry up to 3 days, and up to 10 transfers or 3 GB in 30 days on Free.
2 The cheapest paid plan, at the price shown in Switzerland on the date above; prices differ by country. WeTransfer's Free plan is for individual, non-commercial use. Dropbox Plus has no passwords or branding for transfers; Google One 100 GB adds storage, not sharing features.
3 Gokapi's web interface lists the files of a dropped folder one by one; its command-line client uploads a folder as a ZIP file.
4 SwissTransfer's upload form offers 1, 3, 7, 15 or 30 days; Infomaniak's help articles describe 15 days, with an extension to 30 days offered to the sender by email.
Sources
- WeTransfer: Pricing, How files are protected, Plan limits, Transfer availability, Downloading a transfer, Sending a transfer, Enterprise
- SwissTransfer: SwissTransfer, Data security, Getting started, SwissTransfer with kDrive
- Dropbox Transfer: Dropbox Transfer, Creating a transfer, Where data is stored, How security works, Encrypted team folders, Plans
- Google Drive: Sharing files, Sharing folders, Encryption in Drive, Client-side encryption, Data regions, Uploading folders, Google One plans
- Pingvin Share X: README, Example configuration, Changelog, Documentation, Repository
- PsiTransfer: README, Configuration, Layout customisation, Repository
- Gokapi: Documentation, Usage, Setup, Advanced, Licence
- Erugo: README, Configuration, Branding, Repository
Install
Running in a few minutes
All you need is a server with Docker and a domain name.
- The image includes the web server with automatic TLS certificates, and uses SQLite — no separate database.
- Migrations run on start. Open your domain and the setup wizard creates the first admin account.
- Your files and database live in Docker volumes on your server.
mkdir sealshare && cd sealshare
curl -O https://raw.githubusercontent.com/surtic86/SealShare/main/docker-compose.example.yml
cp docker-compose.example.yml docker-compose.yml
# Generate an app key and paste it into docker-compose.yml
docker run --rm ghcr.io/surtic86/sealshare:latest php artisan key:generate --show
# Edit docker-compose.yml — set APP_KEY, APP_URL, and SERVER_NAME
# Then start:
docker compose up -dFrequently asked questions
Is SealShare end-to-end encrypted?
No. SealShare encrypts files on your server as they arrive, with AES-256-GCM in chunks, and stores them only in encrypted form. Because the server does the encrypting, it handles the files in the clear while they are uploaded and downloaded — which is why it matters that the server is yours.
For a share without a password the key is kept in SealShare's database. With a share password the key is derived from that password and never stored, so the files cannot be decrypted without it.
Can customers send files to us?
Yes. Anyone who can open your upload page can upload and gets a link to send back to you. To keep the page for the people you choose, turn on the optional system password in the admin settings and give it to your customers.
How big can files be?
As big as your server allows. The Docker image accepts up to 4 GB per file by default; within that, you set the maximum file size and share size in the admin settings (100 MB and 2 GB out of the box). Behind a reverse proxy, raise its request size and timeouts as well.
What does it cost?
Nothing. SealShare is open source under the MIT licence. You pay only for the server you run it on.
Who runs it?
You do. There is no SealShare cloud and no account with us: you install the Docker image on a server you run, and your files stay on it instead of passing through a transfer service.