Hoodik: Private Cloud Storage

Hoodik is the client for your own Hoodik cloud storage server. Every file is encrypted on your device before it leaves, so the server never sees your data.

YOUR FILES. YOUR KEYS. YOUR SERVER.

All encryption and decryption happens locally on your device using native Rust cryptography. The server stores only ciphertext, and your private key never leaves your device. Not even the server administrator can read your files.

FEATURES

• Quantum-Proof Encryption: post-quantum hybrid key wrapping (X25519 + ML-KEM-768) with Ed25519 identities, so your files stay private even against future quantum computers. Each file gets its own key, sealed so only you can open it.

• Secure Sign-In: login uses OPAQUE, so your password is never sent to the server. Existing accounts upgrade to the new encryption automatically the next time you log in.

• Fast Chunked Transfers: upload and download large files with concurrent chunked transfers, real-time progress, and integrity checks. Where the server allows it, chunks move straight between your device and its storage. Interrupted transfers pick up where they stopped.

• Encrypted Sharing: share files and folders with other Hoodik users end-to-end encrypted, with reader, editor, and co-owner roles and group sharing. Or create public links with the decryption key in the URL fragment, so recipients get the file without ever seeing your key.

• Markdown Notes: write encrypted notes in a full markdown editor with version history. Notes sync to your server like any other file, ciphertext only.

• File Preview: view images, videos, PDFs, and text files decrypted locally on your device.

• Work On Many At Once: select several files and export or pin them in one go.

• Privacy-Preserving Search: find notes by what is written inside them, not only by their names. Words are tokenized on your device under keys the server never holds, so it matches a query without learning a word of it.

• Offline Access: pin files for offline use. Cached files stay encrypted on disk, and you set how much room the cache may take before older unpinned copies go.

• PIN & Biometric Unlock: protect your account with a PIN or Touch ID / Face ID.

• AI Access on Mac: a built-in MCP server lets local AI assistants work with your files on your terms, secured with a token you control. Decryption still happens only on your device.

• Multi-Server Support: connect to multiple Hoodik servers with different accounts.

• Light and Dark: pick the appearance in Account, or follow the system. Menus and navigation follow each platform's own conventions.

SECURITY YOU CAN TRUST

Hoodik uses modern, post-quantum cryptography: hybrid X25519 + ML-KEM-768 key wrapping, Ed25519 signatures, and AEGIS-128L and AEGIS-256 for fast hardware-accelerated encryption, with Ascon-128a and ChaCha20-Poly1305 as alternatives. Login uses OPAQUE so your password never crosses the network, and SHA-256 and BLAKE2b handle hashing and integrity. Older accounts using RSA-2048 migrate to the new keys automatically.

FULLY AUDITABLE

The complete source code of the app is published on GitHub, and the Rust crypto engine is shared across every Hoodik client. Read the code, build it yourself, verify every claim:
https://github.com/hudikhq/hoodik-client

NO TRACKING. NO ANALYTICS. NO ADS.

Hoodik contains no analytics SDKs, no crash reporting tools, and no advertising frameworks. We don't track how you use the app.

WHAT YOU NEED

Hoodik connects to a Hoodik server. Run one yourself on your own hardware, or let us run a private instance for you at https://hoodik.cloud. Either way, your files are encrypted on your device first, so nobody who operates the server can read them, us included.

The server's source code is published, and it's free for personal use:
https://github.com/hudikhq/hoodik

Deploy in minutes with Docker.

Privacy Policy: https://hoodik.io/privacy-policy
Terms of Use (EULA): https://www.apple.com/legal/internet-services/itunes/dev/stdeula/