Download Beebeeb
One account, end-to-end encrypted. Your files on web, macOS, Windows, and the CLI — iOS (in TestFlight), Android, and Linux desktop apps in development.
your browser
- Nothing to install
- Chrome, Firefox, Safari and Edge
iOS
The iOS app is in TestFlight and coming soon. The web app works on your phone today.
Android
The Android app comes after iOS. The web app works on your phone today.
Mac
- v0.8.22
- Apple Silicon Macs
- Signed and notarized by Apple
Windows
- v0.8.22
- Windows 10 or later, 64-bit
- Windows may show a one-time SmartScreen prompt
Linux
The Linux desktop app is coming. The CLI runs on Linux today, and so does the web app.
the terminal
curl -fsSL https://get.beebeeb.io | sh - v0.17.3
- One binary, no runtime
- SHA-256 checksums published
Apps
iOS
In TestFlight, coming soonAuto-photo backup, Files.app integration, Face ID vault lock, and offline access. Requires iOS 16 or later.
Android
Not available yetIn active development — arrives after the iOS launch. Until then, use Beebeeb on Android through the web app and CLI.
macOS
Native desktop appFinder integration, menubar quick-upload, selective sync, and background file watching. macOS 14 Sonoma or later. Apple Silicon only for now.
Windows
Native desktop appExplorer integration, system-tray sync status, and selective folder sync. Windows 10 (64-bit) or later.
New publisher certificate: Windows SmartScreen may still show a one-time "Windows protected your PC" prompt on early downloads while its download reputation builds. The signature is valid and the publisher is verified (Initlabs B.V.) — choose More info → Run anyway.
Linux
Desktop app coming. The CLI runs on Linux today.The Linux desktop app is coming. Use the CLI or the web app today.
In the browser
Web
No install neededOpen your vault in any modern browser. Nothing to install — works on Chrome, Firefox, Safari, and Edge.
CLI
CLI
TerminalFull access to your vault from the terminal. Runs on Linux, macOS and Windows. Scriptable, pipeable, and WebDAV-mountable. One binary, no runtime.
Verify your download
Verify your download. Windows installers are Authenticode-signed (timestamped Azure Artifact Signing) — Get-AuthenticodeSignature should report Status “Valid” with signer “Initlabs B.V.”. On early downloads SmartScreen may still ask once while the publisher’s download reputation builds; the signature itself is already valid. macOS is Developer ID signed and notarized by Apple — no Gatekeeper warning. Every auto-updater
artifact also carries a minisign update signature: a sibling .sig file
sits next to the Windows NSIS/MSI and macOS .app.tar.gz assets on the GitHub release page,
verifiable with minisign — key ID C6FADFD59D732197.
RWSXIXOd1d/6xmhr0T+FTeFjSnInaMvbhgL5vxbt51DFLwl2qIC8jU6Z minisign -Vm Beebeeb_0.8.22_x64-setup.exe -P RWSXIXOd1d/6xmhr0T+FTeFjSnInaMvbhgL5vxbt51DFLwl2qIC8jU6Z Get-AuthenticodeSignature .\Beebeeb_0.8.22_x64-setup.exe Power users, this one's for you.
The bb CLI gives you full programmatic access to your vault. Scriptable, pipeable, and mountable as a WebDAV drive.
More ways to install
brew install beebeeb-io/tap/bb curl -fsSL https://get.beebeeb.io | sh scoop install https://raw.githubusercontent.com/beebeeb-io/cli/main/scoop/bb.json Common commands
bb upload ./report.pdf # Encrypt and upload a file bb ls # List files in your vault bb download file-id ./local/ # Download and decrypt bb share file-id --expires 7d # Create a 7-day share link bb webdav # Serve your vault over local WebDAV WebDAV mount
Serve your Beebeeb vault as a local WebDAV drive. It is read-only unless you pass --read-write. Every read decrypts locally, and every write encrypts before upload. Works with Finder, rclone, Cyberduck and WinSCP. Windows Explorer’s “Map network drive” is not supported. It listens on 127.0.0.1 port 7878 unless you pick another, and prints a random password at startup.
bb webdav --port 8081 Verify your download
Every CLI release publishes a sha256.sum file with the SHA-256 checksum of each archive on its GitHub release page.
Download it next to your archive and check it (on Linux, use sha256sum -c sha256.sum --ignore-missing):
shasum -a 256 -c sha256.sum --ignore-missing All platforms. One account.
Sign in on any platform and your files are there, decrypted locally. Edits sync in real-time across every device. There is no "primary" device — your vault lives on our servers as ciphertext, and every client holds the key.