Filestash
Web file manager that puts a Dropbox-style interface on top of storage you already have, such as SFTP, S3, SMB, WebDAV and FTP servers.
Filestash at a glance
What is Filestash?
Filestash connects to existing storage over many protocols, including SFTP, S3, SMB, WebDAV, FTP, NFS and IPFS, and lets people browse and work with those files from a browser. Beyond the web client there are native desktop and Android clients that sync a folder, plus gateways that re-expose data over SFTP, S3, FTP, WebDAV or MCP. Nearly everything is a plugin: storage, authentication, search, thumbnails and viewers. Plugins are written in Go and compiled in, or dropped in at runtime as a zip carrying WebAssembly that runs with restricted permissions. A workflow engine chains actions on file events, and file apps open formats from raw photos to CAD drawings.
Good fit if
- Your files already sit on an FTP, SFTP, S3 or SMB server and users want a browser front end for them.
- You need to preview specialist formats such as DICOM, Parquet, DWG or embroidery files without desktop software.
- You plan to adapt authentication, permissions or the interface by writing your own plugins.
Before you adopt it
Filestash is under the AGPL-3.0 license, so a modified version offered to users over a network must have its source published. The repository has no paid parts, and commercial users can buy a support contract. One developer, the repository owner, wrote all commits in the last 90 days, which makes continuity depend on a single person. Filestash's interface comes in 36 languages. There are no tagged releases; installation follows the official guide, and Docker plus a two-service compose file are available.
Drafted with AI from the project's README and repository data, then checked against that data on 7 November 2026. Report a correction
How to run Filestash yourself
One-click install
Not listed in Umbrel, YunoHost, CasaOS, Proxmox VE Helper-Scripts and Coolify. Checked against each panel’s app catalog on 12 November 2026.
Ways to install
- Docker files
- Dockerfile or compose file in the repository
- Compose file
- docker/docker-compose.yml: 2 services
- Setup effort
- 2 of 5, judged from the compose file
- Kubernetes
- No Helm chart in the repository
- Desktop and mobile
- No app builds in GitHub releases
- Interface languages
- 36 languages, including German, French, Spanish, Portuguese, Dutch, Polish, Russian, Ukrainian, Turkish and Japanese
Show all 36
Azerbaijani, Basque, Bulgarian, Catalan, Chinese, Croatian, Czech, Danish, Dutch, Estonian, Finnish, French, Galician, Georgian, German, Greek, Hungarian, Japanese, Korean, Latvian, Lithuanian, Mongolian, Norwegian Bokmål, Polish, Portuguese, Romanian, Russian, Serbian, Slovak, Slovenian, Spanish, Swedish, Thai, Turkish, Ukrainian, Vietnamese
Install instructions: filestash.app or the README on GitHub.
Filestash health: is it still maintained?
52 of 100, actively developed
Read from GitHub on 12 November 2026. How the score works
Filestash security
Security advisories are the vulnerabilities the maintainers disclosed on GitHub, with the versions that fix them; many advisories can mean careful disclosure as much as weak code. OpenSSF Scorecard checks how a project is developed and released: reviews, protected branches, pinned dependencies, signed releases. It does not audit the code itself.
What each Scorecard check found
- Binary files10 / 10No compiled binaries checked into the repository
- License file10 / 10A license file is present
- Maintained10 / 10Steady commits and issue activity in the last 90 days
- Best-practices badge0 / 10No OpenSSF Best Practices badge
- Branch protection0 / 10The main branch has no protection rules
- Code review0 / 10Changes are merged without review
- Fuzzing0 / 10No fuzz testing found
- Pinned dependencies0 / 10Dependencies are not pinned to fixed versions
- Security policy0 / 10No security policy
- Static analysis0 / 10No static analysis found
Advisories read from GitHub on 12 November 2026. From the OpenSSF Scorecard of 9 November 2026; checks that do not apply to Filestash are left out.
Filestash license: is it open source?
Filestash uses AGPL-3.0, an open-source license approved by the OSI.
- June 2017First published on GitHub.
- TodayAGPL-3.0.
Filestash for developers
Written in
- Go 52%
- JavaScript 34%
- CSS 6%
- RPC 3%
- C 2%
- Other 3%
Getting involved
Language shares are GitHub’s count of the code in the repository.
Alternatives to Filestash
- PuterThe Internet Computer! Free, Open-Source, and Self-Hostable. 85 health · AGPL-3.0 · 44.2k stars
- ownCloudownCloud web server core (Files, DAV, etc.) 79 health · AGPL-3.0 · 8.8k stars
- OpenCloudOpenCloud is the open source platform for file management, sharing and collaboration. Simple and sovereign. 79 health · Apache-2.0 · 6.3k stars
- CloudreveSelf-hosted file management and sharing system, supports multiple storage providers 54 health · GPL-3.0 · 29k stars
- copypartyPortable file server with accelerated resumable uploads, dedup, WebDAV, SFTP, FTP, TFTP, zeroconf, media… 75 health · MIT · 47.3k stars
Questions about Filestash
Is Filestash open source?
Yes. Filestash is published under AGPL-3.0, an OSI-approved open-source license.
Is Filestash still maintained?
Its health score is 52 of 100 (actively developed). It had 158 commits in the last 90 days, the latest on 12 November 2026.
How do I run Filestash?
You can run it with Docker and in one click from TrueNAS, Unraid and Runtipi. The README on GitHub has the exact steps.
What is Filestash written in?
Filestash is written mainly in Go (52% of the code), with JavaScript (34%) and CSS (6%), by GitHub’s count of the repository.
What languages is Filestash available in?
The repository has interface translations for 36 languages, including German, French, Spanish, Portuguese, Dutch, Polish, Russian and Ukrainian.
What are the alternatives to Filestash?
Close alternatives in the File storage & sync category include Puter, ownCloud, OpenCloud.