FTP-First. Multi-Protocol. AI-Powered. Encrypted. Privacy-Enhanced.
The modern FTP client that grew into a complete file management platform. Multi-protocol, 6 integrated product modules, 47 languages, one app.
Website · Documentation · Download
| Platform | Status | Packages | Notes |
|---|---|---|---|
| Linux | Stable | .deb, .rpm, .snap, .AppImage, AUR |
Native target, fully tested |
| Windows | Stable | .msi, .exe, .zip portable, winget |
Fully tested, not Microsoft Store signed |
| macOS (Apple Silicon) | Beta | .dmg (aarch64) |
Not code-signed, requires xattr workaround |
| macOS (Intel) | Beta | .dmg (x86_64) |
Not code-signed, requires xattr workaround |
macOS note: The
.dmgis not yet signed with an Apple Developer ID certificate. macOS Gatekeeper will block it. After installing, run:sudo xattr -rd com.apple.quarantine /Applications/AeroFTP.app
AeroFTP is an FTP client first. Full encryption support with configurable TLS modes (Explicit AUTH TLS, Implicit TLS, opportunistic TLS), certificate verification control, MLSD/MLST machine-readable listings (RFC 3659), and resume transfers (REST/APPE). It then extends this foundation into a broad multi-protocol file management platform through six integrated product modules - the Aero Family.
Connect to 40+ cloud providers and services via FTP, FTPS, SFTP, WebDAV, S3, OAuth2, and native APIs.
 Google Drive |
 Dropbox |
 OneDrive |
 MEGA |
 Box |
 pCloud |
 Filen |
 Internxt |
 Zoho |
 Koofr |
 kDrive |
 Jottacloud |
 Yandex Disk |
 4shared |
 FileLu |
 Drime |
 OpenDrive |
 Nextcloud |
 Felicloud |
 CloudMe |
 InfiniCLOUD |
 Jianguoyun |
 Seafile |
 DriveHQ |
 AWS S3 |
 Google Cloud |
 Azure |
 Backblaze |
 Wasabi |
 Cloudflare R2 |
 DigitalOcean |
 Tencent COS |
 Alibaba OSS |
 Oracle |
 Storj |
 IDrive e2 |
 MinIO |
 Hetzner |
 Yandex Cloud |
 Quotaless |
 GitHub |
 GitLab |
 SourceForge |
+ FTP, FTPS, SFTP, WebDAV, Swift protocols
We reached out directly to providers to ensure quality integration.
Special thanks to MEGA, Koofr, FileLu, Felicloud, Storj, pCloud, IDrive, and SourceForge for their responsive technical support.
See the protocol features matrix for full per-provider capabilities.
Web hosting providers can generate encrypted .aeroftp connection profiles from their control panels, so customers can import pre-configured FTP/SFTP connections with a single click - no manual setup, no credentials in plaintext emails.
See the Hosting Integration Guide for the file format specification, encryption details, and ready-to-use code examples in Python and Node.js.
AeroFTP
├── AeroCloud - Personal cloud (27 protocols, sync, share)
├── AeroFile - Professional file manager
├── AeroSync - Bidirectional sync engine
├── AeroVault - Military-grade encryption
├── AeroTools - Code editor + Terminal + AI chat
│ └── AeroAgent - AI-powered assistant (47 tools, 19 providers)
├── AeroFTP CLI - Production command-line client (vault profiles, JSON output, batch scripting, agent discovery)
└── AeroPlayer - Media player with visualizers
Turn any server into a private personal cloud. Connect to 27 protocols with bidirectional sync, selective sync, file versioning, .aeroignore, share links, and per-project folders. Background tray sync with native OS file manager badges (Nautilus, Nemo, Windows Explorer). See the protocol features matrix for full per-provider capabilities.
A full-featured local file manager built into AeroFTP. Toggle between remote and local modes, or use both side-by-side. Three view modes (list, grid, large icons), Places sidebar with drives and network shares, Quick Look preview (Space), drag-and-drop transfers, batch rename, duplicate finder, disk usage treemap, trash browser, properties dialog with checksums, and 20+ keyboard shortcuts.
Enterprise-grade file synchronization built for real-world reliability. Three sync profiles (Mirror, Two-way, Backup), conflict resolution center with per-file strategies, SHA-256 checksum verification, transfer journal with checkpoint/resume, configurable retry with exponential backoff, bandwidth control, post-transfer verification (4 policies), and structured error taxonomy with 10 categories. Integrates with AeroCloud for background tray sync.
Create, manage, and browse encrypted containers that protect your files with a security stack that exceeds industry standards. The encryption engine is published as the standalone aerovault crate on crates.io for use in any Rust project.
AeroVault v2 (.aerovault containers)
| Component | Algorithm | Details |
|---|---|---|
| Content encryption | AES-256-GCM-SIV (RFC 8452) | Nonce misuse-resistant - even nonce reuse doesn't compromise security |
| Key wrapping | AES-256-KW (RFC 3394) | Built-in integrity check on unwrap |
| Filename encryption | AES-256-SIV | Deterministic - file names are hidden, not just content |
| Key derivation | Argon2id | 128 MiB memory / 4 iterations / 4 parallelism (exceeds OWASP 2024) |
| Header integrity | HMAC-SHA512 | 512-bit MAC, quantum-resistance margin |
| Cascade mode | ChaCha20-Poly1305 | Optional double encryption layer for defense-in-depth |
| Chunk size | 64 KB | Per-chunk random nonce + authentication tag |
Open format: The
.aerovaultbinary format is fully documented in the AeroVault v2 Specification with implementation guides for Rust, Java, Python, Go, C, and JavaScript.
Additional encryption features:
- Directory support: Create nested folders inside vaults with encrypted directory entries, hierarchical navigation, and recursive delete
- Cryptomator: Create and browse Cryptomator format 8 vaults (scrypt + AES-SIV + AES-GCM) via context menu
- Archive Browser: Browse ZIP, 7z, TAR, RAR contents in-app without extracting. Selective single-file extraction
- Archive Encryption: ZIP and 7z with AES-256 password protection. Compression levels (Store/Fast/Normal/Maximum)
Integrated development panel with three tools in a tabbed interface: Monaco Editor (VS Code engine, 50+ languages, remote file editing), SSH Terminal (8 themes, multiple tabs), and AeroAgent AI Chat with bidirectional editor sync.
An AI assistant with 47 tools that work across local files and remote providers. Supports 19 AI providers (OpenAI, Anthropic, Gemini, xAI, Ollama, DeepSeek, Mistral, and 12 more). Vision/multimodal, RAG indexing, plugin ecosystem, streaming responses, multi-step autonomous execution, native MCP server mode, and Command Palette (Ctrl+Shift+P).
AeroFTP is built for both humans and AI agents. As agentic AI, computer use, and autonomous coding assistants become the standard way to interact with computers, AeroFTP provides native interfaces for both use cases.
For AI Agents (CLI): Tools like Claude Code, Open Interpreter, Cline, Aider, Devin, Codex, Cursor Agent, Windsurf, and other agentic frameworks can call aeroftp-cli directly. Structured --json output, vault-based --profile credentials (agents never see passwords), semantic exit codes, and .aeroftp batch scripts make AeroFTP a first-class tool in any agent's toolkit. External agents can also invoke aeroftp-cli agent to orchestrate AeroAgent as a credential-isolating proxy for multi-server operations. See Agent Orchestration for the full orchestration guide, CLI reference, and a verified field test report.
For Humans (GUI + AeroAgent): The desktop app provides drag-and-drop file management with AeroAgent, the integrated AI assistant offering 48 tools across local files and remote providers. AeroAgent supports multi-step autonomous execution, tool approval workflows with backend-enforced grants, and 19 AI providers.
Production CLI sharing the same Rust backend as the GUI. 32 subcommands, 27 protocols, encrypted vault profiles, JSON output, batch scripting, and native MCP server mode for AI integration.
aeroftp-cli ls --profile "My Server" /var/www/ -l # Vault profile (no credentials exposed)
aeroftp-cli get sftp://user@host "/data/*.csv" # Glob download
aeroftp-cli serve http sftp://user@host /data # Serve remote as local HTTP
aeroftp-cli serve webdav s3://key:secret@s3.aws.com # Serve remote as local WebDAV
aeroftp-cli agent --mcp # MCP server for Claude/Cursor/VS CodeKey features: --profile credential isolation for AI agents, --json structured output, semantic exit codes (0-8), .aeroftp batch scripts, serve http/webdav, MCP server mode, NO_COLOR compliant. See the CLI Guide and Credential Isolation docs.
Built-in media player with 14 GPU-accelerated visualizer modes (Canvas 2D + WebGL 2 shaders), 10-band graphic EQ with presets, beat detection, and post-processing effects. Zero dependencies - native HTML5 Audio + Web Audio API.
AeroFTP incorporates privacy protections that go beyond what traditional file managers offer.
| Feature | Details |
|---|---|
| Master Password | Optional Argon2id vault encryption - all credentials locked behind a single password |
| Encrypted Vault | All sensitive data in AES-256-GCM encrypted storage - zero plaintext on disk |
| Zero Telemetry | No analytics, no phone-home, no network requests beyond user-initiated connections |
| Memory Zeroization | Passwords and keys cleared from RAM immediately after use |
| Clearable History | One-click clear for recent locations. No persistent browsing traces |
| Portable Deployment | AppImage runs without installation. Remove it and the config directory - no traces remain |
See SECURITY.md for the security policy and architecture summary, and docs.aeroftp.app/security for the complete security documentation with encryption specs, AI security model, supply chain details, and audit history.
| OpenSSF Best Practices | 100% passing - all 67 criteria met |
| Aikido Security | Continuous SAST/SCA monitoring - Top 5% benchmark, OWASP Top 10 coverage, 0 open issues |
| Socket.dev | Supply chain SCA monitoring on every push - dependency risk scoring, typosquatting detection |
| Dependency Scanning | 1,156 packages monitored (320 JS + 836 Rust), daily automated scans |
| Supply Chain | All GitHub Actions pinned to SHA hashes, Dependabot enabled, Sigstore signing with client-side verification |
| Security Audits | 300+ findings resolved across 9 independent audits - grade A- |
| Security Audit | March 2026 - February 2026 (Aikido Security) |
Light, Dark, Tokyo Night, and Cyber - with themed icons, terminal colors, Monaco editor syntax, and CSS custom properties throughout.
Hash Forge (MD5, SHA-1, SHA-256, SHA-512, BLAKE3), CryptoLab (AES-256-GCM, ChaCha20-Poly1305 encrypt/decrypt), Password Forge (CSPRNG + BIP39 passphrase generator with entropy display).
Quality-audited translations with native script integrity. Automatic browser language detection.
| 🇬🇧 English | 🇮🇹 Italian | 🇩🇪 German | 🇪🇸 Spanish | 🇫🇷 French |
| 🇵🇹 Portuguese | 🇷🇺 Russian | 🇯🇵 Japanese | 🇰🇷 Korean | 🇨🇳 Chinese |
| 🇮🇳 Hindi | 🇧🇩 Bengali | 🇹🇷 Turkey | 🇵🇱 Polish | 🇳🇱 Dutch |
| 🇸🇪 Swedish | 🇩🇰 Danish | 🇳🇴 Norwegian | 🇫🇮 Finnish | 🇮🇸 Icelandic |
| 🇨🇿 Czech | 🇭🇺 Hungarian | 🇷🇴 Romanian | 🇺🇦 Ukrainian | 🇬🇷 Greek |
| 🇹🇭 Thai | 🇻🇳 Vietnamese | 🇮🇩 Indonesian | 🇲🇾 Malay | 🇵🇭 Filipino |
| 🇰🇭 Khmer | 🇬🇪 Georgian | 🇦🇲 Armenian | 🇧🇬 Bulgarian | 🇭🇷 Croatian |
| 🇷🇸 Serbian | 🇸🇰 Slovak | 🇸🇮 Slovenian | 🇲🇰 Macedonian | 🇪🇪 Estonian |
| 🇱🇹 Lithuanian | 🇱🇻 Latvian | 🏴 Welsh | Catalan | Galician |
| Basque | 🇰🇪 Swahili |
- In-app download with progress bar showing speed and ETA
- "Install & Restart" for .deb, .rpm, and AppImage - detached relaunch survives parent exit
- Non-intrusive update toast with auto-dismiss (StatusBar badge for persistent access)
- Periodic background check every 24 hours
sudo snap install aeroftp
Note: Snap has limited filesystem access due to strict confinement. For full access, use .deb, .AppImage, or AUR.
yay - S aeroftp-bin
# or
paru - S aeroftp-bin
Available on Arch Linux and derivatives (Manjaro, EndeavourOS, Garuda). Binary package - no compilation needed.
Visit launchpad.net/aeroftp for PPA instructions and .deb packages.
Download from GitHub Releases:
- .deb - Ubuntu, Debian, Linux Mint, Pop!_OS
- .rpm - Fedora, openSUSE, RHEL
- .AppImage - Portable, runs on any distro (AppImageHub)
winget install axpnet.AeroFTP
Available on Windows 10 (1709+) and Windows 11. Requires App Installer from Microsoft Store.
Download from GitHub Releases:
- .exe - NSIS installer
- .msi - Windows Installer
Note: Windows builds are not currently published on the Microsoft Store. The installer is not code-signed (no EV certificate), so Windows SmartScreen may show a warning on first run - this is safe to dismiss.
Download from GitHub Releases:
- .dmg - Universal disk image
Note: The macOS build is not notarized (no Apple Developer certificate). macOS Gatekeeper will block the app on first launch - right-click the app and select "Open" to bypass. See #47 for known issues on Apple Silicon.
All release artifacts are signed with Sigstore using keyless signing via GitHub OIDC. Each release includes .sigstore.json verification bundles.
Install cosign, then verify any downloaded artifact:
cosign verify-blob \
--bundle AeroFTP_3.1.3_amd64.deb.sigstore.json \
--certificate-identity "https://github.com/axpdev-lab/aeroftp/.github/workflows/build.yml@refs/tags/v3.1.3" \
--certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
AeroFTP_3.1.3_amd64.debThis proves the artifact was built by our CI pipeline from the tagged commit. Replace filenames and version with your download.
AeroFTP is free and open source software. If you find it useful, please consider supporting its development:
- GitHub Sponsors: github.com/sponsors/axpnet
- Buy Me a Coffee: buymeacoffee.com/axpnet
- Bitcoin (BTC):
bc1qdxur90s5j4s55rwe9rc9n95fau4rg3tfatfhkn - Ethereum (ETH/EVM):
0x08F9D9C41E833539Fd733e19119A89f0664c3AeE - Solana (SOL):
25A8sBNqzbR9rvrd3qyYwBkwirEh1pUiegUG6CrswHrd - Litecoin (LTC):
LTk8iRvUqAtYyer8SPAkEAakpPXxfFY1D1
Contributions are welcome. Please open an issue to discuss proposed changes before submitting a pull request.
GPL-3.0 - See LICENSE for details.
|
|
|
| OIN 2.0 Community Member | OSI Individual Member | Sigstore Signed Releases |
Built with Rust (Tauri 2) + React 18 + TypeScript
Designed, architected and maintained by axpnet.
AI tools (Claude Code, Codex, Gemini) were used extensively for translations, code review,
implementation and documentation, always under strict human-defined specifications and patterns.
Every feature, design decision and architectural choice is human-driven.
AI accelerated development; it did not direct it.
Full AI Transparency Statement
