Ever wanted to share files

Shard might be able to help you out. For free.

Public Anyone with the link
Password Link + password required
ShardArc 256-bit keyfile encryption

File sharing that
doesn't cost a thing.

Shard is a free and fully open-source file sharing service, built for anyone who needs a straightforward, no-nonsense way to share files - whether it is a single document, a large archive, or anything in between.

No paywalls, no lock-in. The entire codebase is available for anyone to inspect, modify, and deploy. You own your data and your infrastructure.

View on CrystalForge

Private by Design

Files can be encrypted at rest with ShardArc before ever leaving your device.

Self-Hosted Instances

Anyone can run their own Shard instance. Each one is independent, with its own admin and storage.

100% Open Source

Every line is public. Audit, fork, and contribute on CrystalForge.

Lightweight

No JavaScript frameworks, no telemetry, minimal server requirements.


Choose how private you want to be.

Every file uploaded to Shard can use a different protection level. Pick the right mode for the audience and sensitivity of your content.

Public

Server Side Encryption

Files are encrypted at rest on the server. Anyone who receives the link can download the file directly - no credentials required. Ideal for public sharing with a known audience.

Link is the only credential
Protected

Password Protected

Recipients need both the link and a password. The file is encrypted with the password client-side, so the server never has access to the content in plaintext - even the host cannot read it.

Server cannot read the file
Maximum Privacy

ShardArc

Files are packed into a ShardArc archive encrypted with a 256-bit key file before upload. The key is never transmitted to the server. Recipients need the archive and the separate key file to access anything.

256-bit keyfile - never touches the server
If the password or key file is lost, the data is gone permanently. The CrystalSky team cannot recover it.

A custom archive format
built for real security.

ShardArc is a purpose-built archive container that encrypts your data with a separate 256-bit key file before anything touches a server. The archive and the key are two distinct artifacts - sharing a file without the key means sharing nothing.

256-Bit Encryption

Industry-standard key length. Your archive is cryptographically sealed before upload, with the key kept entirely separate.

Custom Container

Not a generic ZIP or TAR with a password. ShardArc is a dedicated format designed for Shard's upload and distribution model.

Separate Key File

The decryption key lives in its own file, distributed independently. Even if an archive is intercepted, it is useless without the corresponding key.

The archive and the key are always separate.

Upload the archive to Shard, send the key file through a different channel. Recipients need both to access anything.

AES-256

Two tools. Every use case.

Whether you need a quick decryption utility or a full-featured client for managing archives on your own server, there is a ShardArc client for you.

Portable

deShard

A minimal, portable decryption utility for ShardArc archives. Drop the binary anywhere, point it at an archive and its key file, and it unpacks. Can also fetch archives from a URL before decrypting them locally.

  • Decrypt ShardArc archives locally using a key file
  • Optional download manager - fetch archives from a URL before decrypting
  • No installation required - single portable executable
  • Fully offline - no server account needed
Full Client

ShardArc

The complete ShardArc experience. Create and decrypt archives, upload to and download from any Shard server, and manage large file transfers - all from one application.

  • Encrypt and decrypt ShardArc archives
  • Upload and download directly to/from a Shard server
  • Configurable server endpoint - point to any Shard instance
  • Suited for larger uploads and community sharing

Both clients support switching the upload server endpoint. If you or your organisation run a private Shard instance, point either client there from the settings menu.


Your server.
Your rules.

Shard is built to run on your own hardware. A single server, a spare VPS, a homelab node - if it runs Linux, it can run Shard. Full admin control over storage quotas, user management, and upload policies.

The admin panel exposes everything you need without hiding it behind paid tiers. ShardArc clients can be pointed at your instance by anyone with the address.

Documentation
Self-hosted admin panel included
Full control over user management and quotas
Discoverable on the public instances list
No telemetry, no callbacks home
shard-setup.sh
# clone and configure
$git clone https://git.crystalsky.dev/shard/shard
$cd shard
$cp config.example.yml config.yml
 
# start with docker compose
$docker compose up -d
Starting shard-server ... done
Starting shard-db ... done
 
# admin panel available at
http://localhost:8080/admin
 
$shard --config config.yml --run
Shard v1.0.0 listening on :8080