Lufi

Spec sheet

Purpose

Lufi is end-to-end encrypted file-sharing software that stores files and lets recipients download them.Read 12 Oct 2026 · github.com

Deployment

The project includes an Ansible role and Terraform plan for deployment, and documents Docker deployment through a separate recipe.Read 5 Oct 2026 · github.com

License

Lufi is licensed under the AGPL.Read 12 Oct 2026 · github.com

API access

YesRead 23 Sep 2026 · github.com

Browser compatibility

The README lists Firefox, Chrome, Internet Explorer 11, Edge, Safari, and iOS and Android devices as tested and working.Read 5 Oct 2026 · github.com

Browser encryption

Files are encrypted and decrypted in the browser, so they do not leave the user's computer unencrypted.Read 12 Oct 2026 · github.com

Browser support

The project lists Firefox, Chrome, Internet Explorer 11, Microsoft Edge, and Safari as tested browsers.Read 12 Oct 2026 · github.com

Clients

Lufi offers a web interface, a CLI client, and a Python client.Read 5 Oct 2026 · github.com

Command-line clients

The project links to a CLI client installable through npm and to a separate Python client.Read 12 Oct 2026 · github.com

Contributions

The project invites issue reports, internationalization help, and code contributions.Read 12 Oct 2026 · github.com

Demo instance

The project links to a demonstration site and says it has strong time and file-size limitations.Read 12 Oct 2026 · github.com

Demo limits

The project links to a demonstration site and says it has strong limits on time and file size.Read 5 Oct 2026 · github.com

Encryption

Encryption and decryption happen in the browser, and the encryption key is never sent over the network.Read 5 Oct 2026 · github.com

Encryption key

The encryption key is kept in the URL fragment and is never sent over the network.Read 12 Oct 2026 · github.com

Languages

The project says Lufi comes with several languages.Read 12 Oct 2026 · github.com

Metadata

The file name, size, and MIME type are sent unencrypted.Read 5 Oct 2026 · github.com

Mobile support

The project says it has been tested on iOS devices, including iPad and iPhone, and Android devices, including Galaxy Tab and Galaxy S8.Read 12 Oct 2026 · github.com

No bounty

The security policy says Lufi has no bounty program at this time.Read 5 Oct 2026 · github.com

Security support

Only the latest Lufi release is supported and receives security fixes; vulnerabilities in the develop branch may also be reported.Read 5 Oct 2026 · github.com

Self-hosting

Deployment options described include an Ansible role, a Terraform plan for AWS, and a Docker recipe.Read 12 Oct 2026 · github.com

Support and contributions

The README invites users to report issues, help with internationalization, and contribute code.Read 5 Oct 2026 · github.com

Unencrypted metadata

The file name, size, and MIME type are sent unencrypted.Read 12 Oct 2026 · github.com

Vulnerability reports

The security policy directs vulnerability reports to a confidential issue on the project's Framagit instance.Read 5 Oct 2026 · github.com

Where Specifiction places it

• File transfer services#83 of 1057.6