Welcome to Nexo Share
Nexo Share is a self-hosted WeTransfer alternative: secure file sharing that runs on your infrastructure so you keep control of storage, access, and retention.
Share large files with password protection and expiration. Collect uploads via Reverse Shares. Protect accounts with 2FA (admins can require it for everyone) and passkeys. Scan uploads with ClamAV. Integrate OIDC SSO and manage everything from an admin dashboard with audit logs.
Why Nexo Share?
Public transfer services put files on someone else’s cloud. Nexo Share is designed so organizations can host their own transfer platform without giving up security or usability.
Security-first features include:
- Two-factor authentication (TOTP), optionally required by admins
- Passkey support (Face ID, Touch ID, Windows Hello)
- ClamAV virus scanning in the Docker stack
- Password-protected shares with automatic expiration
- Reverse Shares — guest drop-off links without accounts
Key Features
- Upload & Share — Files and folders with chunked uploads, passwords, and expiry
- Reverse Shares — Public links so others can send files to you
- Secure previews — PDF, Office, images, and media in the browser
- SSO (OIDC) — Enterprise identity provider support
- Admin dashboard — Users, SMTP, limits, branding, and audit logs
- Docker-ready — App, PostgreSQL, and ClamAV on a private network
Background
Nexo Share continues the idea of a self-hosted transfer UI after Pingvin Share was archived. It rebuilds that foundation with maintained dependencies, stronger security defaults, and production-oriented deployment.
Architecture
Nexo Share typically runs as three Docker services:
- Main application (Bun + React)
- PostgreSQL database
- ClamAV virus scanner
Components talk over a private Docker network; only the web interface needs to be exposed.
Getting Started
Continue to Prerequisites, then Installation.