Hoodik

Tibor Hudik

In-app purchases

About this app

Hoodik is the mobile client for your self-hosted Hoodik cloud storage server. Every file is encrypted on your device before it leaves — the server never sees your data.

YOUR FILES. YOUR KEYS. YOUR SERVER.

All encryption and decryption happens locally on your device using military-grade cryptography via native Rust code. The server stores only ciphertext — your private key never leaves your device. Not even the server administrator can read your files.

FEATURES

- End-to-End Encryption — Hybrid RSA-2048 + AEGIS-128L encryption with hardware acceleration. Each file gets its own symmetric key, wrapped with your RSA public key.

- Fast Chunked Transfers — Upload and download large files with concurrent chunked transfers, real-time progress tracking, and CRC integrity checks.

- File Preview — View images, videos, PDFs, and text files decrypted locally on your device. Swipe through image galleries with encrypted thumbnail previews.

- Privacy-Preserving Search — Search your files without revealing what you're looking for. File names are tokenized and hashed on-device — the server only sees opaque tokens.

- Secure Sharing — Create public links with the decryption key in the URL fragment. Recipients get the file without ever seeing your encryption key.

- Offline Access — Pin files for offline access. Cached files stay encrypted on disk and are decrypted only when you view them.

- PIN & Biometric Unlock — Protect your account with PIN, Face ID, or fingerprint. Your private key is encrypted with your PIN and never stored in plaintext.

- Two-Factor Authentication — Optional TOTP-based 2FA for an extra layer of security on your account.

- Multi-Server Support — Connect to multiple Hoodik servers with different accounts. Switch between them seamlessly.

SECURITY YOU CAN TRUST

Hoodik uses battle-tested cryptographic primitives:
— RSA-2048 for asymmetric encryption
— AEGIS-128L for fast, hardware-accelerated symmetric encryption
— Ascon-128a and ChaCha20-Poly1305 as alternative ciphers
— SHA-256, BLAKE2b for hashing and integrity verification
— BERT tokenization + SHA-256 for privacy-preserving search

The crypto engine is written in Rust and shared across all Hoodik clients (web, mobile, desktop) — the same code, auditable and open source.

NO TRACKING. NO ANALYTICS. NO ADS.

Hoodik contains no analytics SDKs, no crash reporting tools, and no advertising frameworks. We don't track how you use the app. Period.

WHAT YOU NEED

Hoodik is a client app — it connects to a self-hosted Hoodik server that you run on your own hardware or VPS. The server is open source and free for personal use:
https://github.com/hudikhq/hoodik

Deploy in minutes with Docker. Full documentation included.

What’s new

- Reliable uploads behind any server, including ones with strict body-size or timeout limits — automatic recovery when the fast path is blocked.
- Smoother upload progress — the bar no longer jumps back to 0 % when transfers retry.
- Biometric unlock fixed on newer Android phones (Galaxy S25 / Android 16).
- Video thumbnails now generate on macOS uploads.
- Markdown editor: the "new note" button no longer covers the toolbar while a note is open.