Open source
Open source cloud storage. Read the code that encrypts your files.
The Beebeeb apps and the encryption core are public under the AGPL. You do not have to trust us. You can check.
No card or iDEAL needed to start.
What is open
| Part | What it does | Licence | Source |
|---|---|---|---|
| Encryption and sync core | The code that encrypts your files and syncs them. Shared by every app. | AGPL-3.0 | github.com/beebeeb-io/core |
| Web app | Beebeeb in your browser. Runs the core as WebAssembly. | AGPL-3.0 | github.com/beebeeb-io/web |
| Mobile app | The phone app. | AGPL-3.0 | github.com/beebeeb-io/mobile |
| Desktop apps | The apps that sync a folder to your vault. | AGPL-3.0 | github.com/beebeeb-io/desktop |
| CLI | Upload, download and share from a terminal. | AGPL-3.0 | github.com/beebeeb-io/cli |
What is not open
The server is private. It only ever stores ciphertext, and the code that does the encrypting runs on your device and is public, so what leaves your device can be checked. We say this up front because "open source" is often used loosely.
How to check it
- Read the encryption in the core. The primitives are named on the security page: AES-256-GCM, HKDF-SHA256, Argon2id, OPAQUE and X25519.
- Build an app from source instead of installing our build.
- Watch your network traffic while you upload a file. What leaves your device is ciphertext.
Audit status
An independent audit is planned and the findings will be published. Until then, open code is how you can check our claims.
Found a problem?
Report security issues through responsible disclosure. For everything else, open an issue in the repository.