AeroFTP is a multi-protocol file manager designed for secure and efficient file transfer and management across multiple cloud platforms. Built with Tauri 2 using Rust, React 18, and TypeScript, AeroFTP supports 16 protocols, including FTP, SFTP, WebDAV, Google Drive, Dropbox, OneDrive, and more.
Key Features:
AI assistant with 45 tools and support for 15 LLM providers
Built-in code editor, SSH terminal, and media player with visualizers
Support for 47 languages and 4 themes
Audience & Benefit:
Ideal for developers, IT professionals, and security-conscious users who need a versatile tool for managing files securely across various platforms. AeroFTP provides seamless integration, encryption, and AI-powered assistance to streamline file management tasks.
Available as an open-source application, AeroFTP can be installed via winget.
> macOS note: The .dmg is not yet signed with an Apple Developer ID certificate. macOS Gatekeeper will block it. After installing, run: sudo xattr -rd com.apple.quarantine /Applications/AeroFTP.app
FTP-First Design
AeroFTP is an FTP client first. Full encryption support with configurable TLS modes (Explicit AUTH TLS, Implicit TLS, opportunistic TLS), certificate verification control, MLSD/MLST machine-readable listings (RFC 3659), and resume transfers (REST/APPE). It then extends this foundation into a broad multi-protocol file management platform through six integrated product modules - the Aero Family.
Integrations
Connect to 40+ cloud providers and services via FTP, FTPS, SFTP, WebDAV, S3, OAuth2, and native APIs.
+ FTP, FTPS, SFTP, WebDAV, Swift protocols
We reached out directly to providers to ensure quality integration.
Special thanks to MEGA, Koofr, FileLu, Felicloud, Storj, pCloud, IDrive, and SourceForge for their responsive technical support.
Turn any server into a private personal cloud. Connect to 27 protocols with bidirectional sync, selective sync, file versioning, .aeroignore, share links, and per-project folders. Background tray sync with native OS file manager badges (Nautilus, Nemo, Windows Explorer). See the protocol features matrix for full per-provider capabilities.
A full-featured local file manager built into AeroFTP. Toggle between remote and local modes, or use both side-by-side. Three view modes (list, grid, large icons), Places sidebar with drives and network shares, Quick Look preview (Space), drag-and-drop transfers, batch rename, duplicate finder, disk usage treemap, trash browser, properties dialog with checksums, and 20+ keyboard shortcuts.
Enterprise-grade file synchronization built for real-world reliability. Three sync profiles (Mirror, Two-way, Backup), conflict resolution center with per-file strategies, SHA-256 checksum verification, transfer journal with checkpoint/resume, configurable retry with exponential backoff, bandwidth control, post-transfer verification (4 policies), and structured error taxonomy with 10 categories. Integrates with AeroCloud for background tray sync.
Create, manage, and browse encrypted containers that protect your files with a security stack that exceeds industry standards. The encryption engine is published as the standalone aerovault crate on crates.io for use in any Rust project.
AeroVault v2 (.aerovault containers)
Component
Algorithm
Details
Content encryption
AES-256-GCM-SIV (RFC 8452)
Nonce misuse-resistant - even nonce reuse doesn't compromise security
Key wrapping
AES-256-KW (RFC 3394)
Built-in integrity check on unwrap
Filename encryption
AES-256-SIV
Deterministic - file names are hidden, not just content
Optional double encryption layer for defense-in-depth
Chunk size
64 KB
Per-chunk random nonce + authentication tag
> Open format: The .aerovault binary format is fully documented in the AeroVault v2 Specification with implementation guides for Rust, Java, Python, Go, C, and JavaScript.
Additional encryption features:
Directory support: Create nested folders inside vaults with encrypted directory entries, hierarchical navigation, and recursive delete
Cryptomator: Create and browse Cryptomator format 8 vaults (scrypt + AES-SIV + AES-GCM) via context menu
Integrated development panel with three tools in a tabbed interface: Monaco Editor (VS Code engine, 50+ languages, remote file editing), SSH Terminal (8 themes, multiple tabs), and AeroAgent AI Chat with bidirectional editor sync.
AeroAgent - AI-Powered Assistant
An AI assistant with 47 tools that work across local files and remote providers. Supports 19 AI providers (OpenAI, Anthropic, Gemini, xAI, Ollama, DeepSeek, Mistral, and 12 more). Vision/multimodal, RAG indexing, plugin ecosystem, streaming responses, multi-step autonomous execution, native MCP server mode, and Command Palette (Ctrl+Shift+P).
AeroFTP is built for both humans and AI agents. As agentic AI, computer use, and autonomous coding assistants become the standard way to interact with computers, AeroFTP provides native interfaces for both use cases.
For AI Agents (CLI): Tools like Claude Code, Open Interpreter, Cline, Aider, Devin, Codex, Cursor Agent, Windsurf, and other agentic frameworks can call aeroftp-cli directly. Structured --json output, vault-based --profile credentials (agents never see passwords), semantic exit codes, and .aeroftp batch scripts make AeroFTP a first-class tool in any agent's toolkit. External agents can also invoke aeroftp-cli agent to orchestrate AeroAgent as a credential-isolating proxy for multi-server operations. See Agent Orchestration for the full orchestration guide, CLI reference, and a verified field test report.
For Humans (GUI + AeroAgent): The desktop app provides drag-and-drop file management with AeroAgent, the integrated AI assistant offering 48 tools across local files and remote providers. AeroAgent supports multi-step autonomous execution, tool approval workflows with backend-enforced grants, and 19 AI providers.
Production CLI sharing the same Rust backend as the GUI. 32 subcommands, 27 protocols, encrypted vault profiles, JSON output, batch scripting, and native MCP server mode for AI integration.
aeroftp-cli ls --profile "My Server" /var/www/ -l # Vault profile (no credentials exposed)
aeroftp-cli get sftp://user@host "/data/*.csv" # Glob download
aeroftp-cli serve http sftp://user@host /data # Serve remote as local HTTP
aeroftp-cli serve webdav s3://key:secret@s3.aws.com # Serve remote as local WebDAV
aeroftp-cli agent --mcp # MCP server for Claude/Cursor/VS Code
Key features: --profile credential isolation for AI agents, --json structured output, semantic exit codes (0-8), .aeroftp batch scripts, serve http/webdav, MCP server mode, NO_COLOR compliant. See the CLI Guide and Credential Isolation docs.
Built-in media player with 14 GPU-accelerated visualizer modes (Canvas 2D + WebGL 2 shaders), 10-band graphic EQ with presets, beat detection, and post-processing effects. Zero dependencies - native HTML5 Audio + Web Audio API.
Privacy-Enhanced
AeroFTP incorporates privacy protections that go beyond what traditional file managers offer.
Feature
Details
Master Password
Optional Argon2id vault encryption - all credentials locked behind a single password
Encrypted Vault
All sensitive data in AES-256-GCM encrypted storage - zero plaintext on disk
Zero Telemetry
No analytics, no phone-home, no network requests beyond user-initiated connections
Memory Zeroization
Passwords and keys cleared from RAM immediately after use
Clearable History
One-click clear for recent locations. No persistent browsing traces
Portable Deployment
AppImage runs without installation. Remove it and the config directory - no traces remain
See SECURITY.md for the security policy and architecture summary, and docs.aeroftp.app/security for the complete security documentation with encryption specs, AI security model, supply chain details, and audit history.
> Note: Windows builds are not currently published on the Microsoft Store. The installer is not code-signed (no EV certificate), so Windows SmartScreen may show a warning on first run - this is safe to dismiss.
> Note: The macOS build is not notarized (no Apple Developer certificate). macOS Gatekeeper will block the app on first launch - right-click the app and select "Open" to bypass. See #47 for known issues on Apple Silicon.
Verifying Release Integrity
All release artifacts are signed with Sigstore using keyless signing via GitHub OIDC. Each release includes .sigstore.json verification bundles.
Install cosign, then verify any downloaded artifact:
<a href="https://openinventionnetwork.com/"><img src="icons/oin-member-badge.png" height="60" /></a>
<a href="https://opensource.org"><img src="icons/osi-member.png" height="60" /></a>
<a href="https://sigstore.dev"><img src="icons/sigstore-signed.png" height="60" /></a>
OIN 2.0 Community Member
OSI Individual Member
Sigstore Signed Releases
Built with Rust (Tauri 2) + React 18 + TypeScript
Designed, architected and maintained by <a href="https://github.com/axpnet">axpnet</a>.
AI tools (Claude Code, Codex, Gemini) were used extensively for translations, code review,
implementation and documentation, always under strict human-defined specifications and patterns.
Every feature, design decision and architectural choice is human-driven.
AI accelerated development; it did not direct it.
<a href="AI-TRANSPARENCY.md">Full AI Transparency Statement</a>
