README
¶
Share files between devices. They show up as a folder on your computer.
- End-to-end encrypted (post-quantum). The relay cannot read your files.
- On the same network, devices find each other automatically. One click to connect.
- Over the internet, exchange fingerprints once. Save contacts for future sessions.
- Peer files appear as a native folder (FUSE). Open, edit, git clone, anything.
- Works through firewalls. Automatic fallback to an encrypted relay.
- macOS, Linux, Windows. iOS and Android coming soon.
- Open source (MPL-2.0).
| Direct Transfer | Virtual Folder (FUSE) |
|---|---|
 |
 |
| Drag files in. Your peer saves what they need. | Peer files appear as a folder. Open in any app. |
| Finder | Terminal (git) |
|---|---|
 |
 |
Install
macOS
brew tap keibisoft/keibidrop
brew install keibidrop
Linux (Debian/Ubuntu)
wget https://github.com/KeibiSoft/KeibiDrop/releases/latest/download/keibidrop_amd64.deb
sudo dpkg -i keibidrop_amd64.deb
Windows
choco install keibidrop
Or download from GitHub Releases.
Build from source
git clone https://github.com/KeibiSoft/KeibiDrop.git
cd KeibiDrop
make build-kd # CLI daemon
make build-cli # Interactive CLI
make build-rust # Desktop UI (needs Rust + Slint)
Quick start
Same network (LAN):
- Both peers launch KeibiDrop
- Devices discover each other automatically
- One click to connect
- Share files
Over the internet:
- Both peers launch KeibiDrop
- Copy your fingerprint and send it to your peer (Signal, Telegram, anything)
- Paste each other's fingerprints and connect
- Share files
Save a peer as a contact to skip the fingerprint exchange next time. On the same network, saved contacts connect with one click using pseudonyms.
It works through firewalls automatically. If direct connection fails, KeibiDrop falls back to an encrypted relay. No port forwarding, no router configuration.
Two modes
| Direct Transfer | Virtual Folder (FUSE) | |
|---|---|---|
| Speed | Up to 550 MB/s | Up to 250 MB/s |
| How it works | Add files, peer pulls them | Peer's files appear as a local folder |
| Setup | Nothing extra | Install macFUSE, fuse3, or WinFsp |
| Best for | Sending large files | Working on shared files, git repos |
How it works
- Peers exchange fingerprints (or discover each other on LAN)
- KeibiDrop finds the fastest path: LAN, direct IPv6, or encrypted relay
- Files transfer over an encrypted channel the relay cannot read
- Keys rotate automatically for forward secrecy
The encryption is post-quantum (ML-KEM-1024 + X25519) with AES-256-GCM or ChaCha20-Poly1305. Full protocol details in Security.md.
Three interfaces
Desktop UI (Rust/Slint)
./keibidrop
Interactive CLI (terminal REPL)
./keibidrop-cli
Agent CLI (for scripts and AI agents, all output is JSON)
./kd start # Start daemon
./kd show fingerprint # Get your fingerprint
./kd register <peer-fingerprint> # Register peer
./kd create # Create room (or: kd join)
./kd add /path/to/file.zip # Share a file
./kd list # List shared files
./kd pull file.zip ~/Downloads/ # Download a file
Configuration
KeibiDrop reads ~/.config/keibidrop/config.toml. Environment variables override the config.
| Setting | Env var | Default |
|---|---|---|
| Relay server | KD_RELAY |
https://keibidroprelay.keibisoft.com/ |
| Bridge relay | KD_BRIDGE |
bridge.keibisoft.com:26600 |
| Save folder | KD_SAVE_PATH |
~/KeibiDrop/Received/ |
| FUSE mount | KD_MOUNT_PATH |
~/KeibiDrop/Mount/ |
| Inbound port | KD_INBOUND_PORT |
26431 |
| Disable FUSE | KD_NO_FUSE |
false |
Security
Post-quantum hybrid key exchange prevents future quantum computers from decrypting recorded traffic. Forward secrecy via periodic re-keying limits exposure if a session key is ever compromised.
By default, identity is ephemeral: a fresh keypair each session, anonymous, unlinkable. For ease of use, you can save persistent identities encrypted with a per-install master key stored in the OS keychain (macOS Keychain Services, Linux Secret Service, Windows Credential Manager). Headless setups fall back to ~/.config/keibidrop/.master.key (mode 0600). Optional passphrase protection via Argon2id for users who back up config to the cloud.
Full protocol description: Security.md
Troubleshooting
See TROUBLESHOOTING.md.
Contributing
See CONTRIBUTING.md.
License
Go engine, CLI, and mobile bindings: Mozilla Public License 2.0 (per-file copyleft)
Rust UI and brand assets: Proprietary - see DUAL-LICENSE.md
Desktop UI built with Slint
Built by KeibiSoft SRL.
Links
- Website
- Technical deep dive
- Blog posts (22 posts on FUSE, crypto, performance)
- FAQ
- Comparison with alternatives
Directories
¶
| Path | Synopsis |
|---|---|
|
cmd
|
|
|
cli
command
|
|
|
kd
command
|
|
|
Package mobile provides gomobile-compatible bindings for KeibiDrop.
|
Package mobile provides gomobile-compatible bindings for KeibiDrop. |
|
pkg
|
|
|
discovery
SPDX-License-Identifier: MPL-2.0 Copyright (c) 2025 KeibiSoft S.R.L. This Source Code Form is subject to the terms of the Mozilla Public License, v.
|
SPDX-License-Identifier: MPL-2.0 Copyright (c) 2025 KeibiSoft S.R.L. This Source Code Form is subject to the terms of the Mozilla Public License, v. |
|
logic/common
SPDX-License-Identifier: MPL-2.0 Copyright (c) 2025 KeibiSoft S.R.L. This Source Code Form is subject to the terms of the Mozilla Public License, v.
|
SPDX-License-Identifier: MPL-2.0 Copyright (c) 2025 KeibiSoft S.R.L. This Source Code Form is subject to the terms of the Mozilla Public License, v. |
|
mount-fuse is a minimal program that mounts a KeibiDrop FUSE filesystem at a given directory without needing a peer connection or relay.
|
mount-fuse is a minimal program that mounts a KeibiDrop FUSE filesystem at a given directory without needing a peer connection or relay. |
|
tests
|
|
|
cmd/testpeer
command
testpeer is a scriptable KeibiDrop peer for multi-process integration tests.
|
testpeer is a scriptable KeibiDrop peer for multi-process integration tests. |