Nextcloud

What Nextcloud does

Nextcloud Server stores, syncs and shares files across computers and phones, and it is the starting point for a much larger platform. The desktop client keeps folders in sync on Windows, macOS and Linux, and the mobile apps handle uploads and access on iOS and Android. In the web interface you can share files with other users, create public links and share across servers through federation. Deleted files go to a trash bin, and earlier versions of a file can be restored.

On top of the files, the app store adds calendars, contacts, mail, video calls (Talk), office editing and much more. That breadth is what sets Nextcloud apart in this category: it can replace not only Dropbox, Google Drive or OneDrive but also parts of the suites they belong to. You install only the apps you need.

Nextcloud can also mount storage it does not own. External storage supports Amazon S3, SMB/CIFS shares, SFTP, FTP/FTPS, WebDAV and OpenStack object storage, so users can reach existing file servers through the same interface.

Security and encryption

Nextcloud has two separate encryption features, and it is worth knowing what each one protects.

• Server-side encryption encrypts file contents at rest with keys held on the server. File names and folder structure stay readable, and it does not protect against a compromised server or an administrator. The documentation presents it mainly as a way to protect files stored on third-party external storage, and suggests disk encryption such as LUKS for local storage. Once enabled it cannot be switched off in the web interface, and losing the keys means losing the data.
• End-to-end encryption happens in the desktop and mobile clients before upload, so the server administrator cannot read those folders.

Two-factor authentication is available, and the project runs a bug bounty program on HackerOne.

Self-hosting Nextcloud

The project calls Nextcloud All-in-One its official installation method. It is a Docker setup that bundles PostgreSQL, Redis, the Client Push backend and optional extras such as Nextcloud Office, the Talk backend, BorgBackup-based backups, ClamAV, full-text search and image previews, with a web page for updates and restores.

A manual install is also documented. It needs 64-bit Linux, MariaDB, MySQL or PostgreSQL (SQLite only for testing), Apache 2.4 or nginx with PHP-FPM, and a supported PHP version, with at least 128 MB and ideally 512 MB of memory per PHP process. Oracle Database is supported only with an enterprise subscription. A PHP application with a database, cache and web server needs regular care, and performance tuning matters as the number of users and files grows.

Hosted version

Nextcloud GmbH does not run its own consumer hosting. Its sign-up page sends you to certified partner providers, some of which offer free accounts with a small amount of storage, alongside paid plans. Because the software is the same everywhere, you can start with a provider and move to your own server later. Nextcloud GmbH sells Enterprise subscriptions for organizations that want support and longer maintenance.

Limitations

The range of apps is a strength but also a maintenance load: each app has its own release pace and quality. Server-side encryption leaves file names visible and does not protect against the server admin, so for sensitive data you need the end-to-end option and its limits. Long-term support beyond the community release cycle requires a paid subscription.

Who it suits

Nextcloud fits households, companies, schools and public bodies that want one self-hosted platform for files and, optionally, calendars, contacts, chat and office documents. If you only need fast file sync, Seafile is lighter; if you want no server at all, look at Syncthing.