Self-Hosting a Zero-Knowledge File Sharing Server in Under 10 Minutes

If you share files with teammates, clients, or anyone outside your network, you’re almost certainly trusting a third-party server with your data. Even “encrypted” services often mean encryption in transit — the server still stores your plaintext. This guide shows you how to self-host FileShot.io , a zero-knowledge file sharing server where the decryption key never reaches the server — ever. What “Zero-Knowledge” Actually Means Most file sharing services encrypt data in transit (TLS) and at rest (disk encryption). But the service still holds your encryption keys. If their servers are breached, subpoenaed, or compromised internally, your files are exposed. Zero-knowledge means the server handles only ciphertext. The key lives nowhere on the server — not even transiently. FileShot implements this using the URL fragment (the # part of the URL), which browsers strip from HTTP requests by specification. The server receives the file but genuinely cannot read it. The Architecture Browser Serve