๐Ÿ›ก๏ธ Encrypted FTPS ยท Multi-tenant ยท Self-hosted

Your own secure
backup storage server

ThorStorage gives you private FTP backup accounts, encrypted transfers, disk quotas and a clean web admin โ€” plus a built-in video player and one-tap casting to a Chromecast. All on hardware you control.

๐Ÿ”’ FTPS (FTP over TLS) enforced ๐Ÿ“ Private per-account folders ๐Ÿ‘ฅ Tenants & quotas ๐Ÿ“บ Chromecast casting ๐Ÿ” Free Let's Encrypt HTTPS ๐Ÿ“ฑ Installs as a phone app
ThorStorage dashboard

Everything built in

One server, every backup workflow

Create accounts, connect your backup tools over encrypted FTPS, and manage it all from anywhere โ€” no extra software to install on the server.

๐Ÿ”‘

FTP backup accounts

Add an account and its private folder in one step, with a generated strong password. Reset or delete any account in a click.

๐Ÿ”’

Encrypted by default

FTPS (FTP over TLS) is required โ€” plaintext logins are refused. Each account is jailed to its own folder, FTP only, no shell.

๐Ÿ‘ฅ

Multi-tenant

Give each customer their own web login and isolated space. Tenants never see each other; admins see everything.

๐Ÿ“Š

Quotas & auto-suspend

Set a per-tenant GB quota. Over the limit, uploads and FTP are suspended automatically โ€” and restored when usage drops.

โฌ†๏ธ

Effortless uploads

Drag & drop files or whole folders, paste from the clipboard, or grab an image off any web page โ€” with live progress bars.

๐ŸŽฌ

Play & cast video

Stream your videos right in the browser with subtitle and aspect controls, then cast to a Chromecast with a branded intro.

๐Ÿ”

Free HTTPS certificate

Request a free Let's Encrypt certificate from Settings โ€” it secures both the web admin and FTPS, and renews automatically.

๐Ÿ“ˆ

Reports & logs

Capacity and usage, each user's last sign-in with IP and device, and sign-in history โ€” exportable to CSV or PDF.

๐Ÿ“ฑ

Installs like an app

Add ThorStorage to your phone's home screen as a full-screen Progressive Web App โ€” Android and iPhone, no app store.

A look inside

Clean, fast web admin

Everything is a click away โ€” the same interface on desktop and phone.

Files view
Files & foldersBrowse, upload, preview, move & delete
Settings
SettingsMail, HTTPS certificate, FTP options
Reports
ReportsUsage & sign-ins ยท CSV / PDF export
Tenant management
TenantsPer-customer space, email & quota

Get ThorStorage

Download

Downloadable ISO images. Current release v2.11.

๐Ÿ’ฟ

OS Installer

Bootable ISO that installs Debian and ThorStorage together as a turnkey appliance โ€” ideal for a dedicated machine or VM.

v2.11ISO ยท ~89 MBx86-64
โฌ‡ Download ISO
๐Ÿ“ฆ

App only โ€” no OS

Install ThorStorage on an existing Debian 12/13 server. Sets up the app and services without reinstalling the operating system.

v2.11ISO ยท ~82 MBDebian 12/13
โฌ‡ Download ISO

โš ๏ธ The OS Installer erases the target disk. The App-only image installs on an existing Debian without touching your data. A SHA-256 checksum is published with each ISO.

Connect in minutes

Point any FTP client at it

Use an FTP account's credentials with any client that supports explicit FTP over TLS in passive mode โ€” FileZilla, WinSCP, lftp, or your backup tool.

Host / Serveryour server address
Usernamethe FTP account name
Passwordthat account's password
EncryptionRequire explicit FTP over TLS
ModePassive

Command line (lftp):

lftp -u backup_srv1 \
  ftps://your-server:21

Each account logs in to a private root and cannot browse the rest of the server. Behind NAT, forward the FTP control port and the passive range.

Documentation

Help & guide

Everything the app can do, and how to connect. Click a topic to expand.

๐Ÿงญ Accounts & roles ๏ผ‹
Sign in with your web username and password. There are two roles. An admin manages the whole server โ€” all storage, every tenant, mail and settings. A tenant manages only their own space (their own FTP accounts, folders and files) and cannot see other tenants.
๐Ÿ  Dashboard ๏ผ‹
Your home screen shows a storage overview (space used vs available and how many FTP accounts exist), the list of FTP accounts with their folder and size, your folders, and your recent sign-ins.
๐Ÿ”‘ FTP backup accounts ๏ผ‹
On the Dashboard, add an FTP account and its private folder in one step (use Generate for a strong 12-character password). Each account row lets you reset its password or delete it. These are the accounts your backup tools log in with over FTPS.
๐Ÿ“ Files & folders ๏ผ‹
Open Files to browse. Create folders (spaces are allowed), download or preview any file, and move or delete files and folders (deletion is recursive and always asks to confirm). Click a file name to preview images, PDFs and audio in a viewer, or play a video. An FTP account's main folder is protected โ€” it is removed only by deleting the account.
โฌ†๏ธ Uploading ๏ผ‹
Open the target folder, then upload any way you like: drag & drop files, drag & drop a whole folder (its subfolders are recreated), use "upload a folder", drop an image from another web page, or paste from the clipboard (Ctrl+V). Each file shows a progress bar with Cancel, plus Cancel all. Uploads never overwrite โ€” a clashing name gets " (1)", " (2)" โ€” and everything is auto-owned by the folder's FTP account, so it stays retrievable over FTP.
๐Ÿ”€ Moving files ๏ผ‹
Tick the checkboxes next to files, then use "Move selectedโ€ฆ" to move them into another folder you control โ€” a tenant stays inside their own space; an admin can move anywhere.
๐ŸŽฌ Playing video ๏ผ‹
Click Play to open the player (it does not autoplay โ€” press play yourself). Choose the aspect (default 16:9; also Fit, Zoom, Stretch, 4:3), turn subtitles on/off or switch language, and โ€” when casting โ€” switch the audio language if the file has several. Downloading from the player is disabled.
๐Ÿ“บ Casting to a TV (Chromecast) ๏ผ‹
Press Cast and pick your Chromecast. A short branded intro plays in full, then your video. On the TV you can change the aspect and subtitles; the screen only shows "Playing from ThorStorage" โ€” never the file name. Casting works from Chrome on desktop and Android, on the same network as the Chromecast.
๐Ÿ‘ฅ Tenants (admin) ๏ผ‹
Under Users, create a tenant (a web login with its own space) with an email and a storage quota. Edit a tenant to change its recovery email or quota, email it a password-reset link or set a new password, or delete it (keeping or also erasing its data). The username cannot be changed.
๐Ÿ“Š Disk quotas & FTP suspension ๏ผ‹
Each tenant can have a storage quota in GB (0 = unlimited; new tenants default to 10 GB). When a tenant goes over quota, web uploads are refused and its FTP logins are suspended automatically; they are restored automatically once usage drops back under the limit. An admin or the tenant can also re-enable FTP once back under quota.
๐Ÿ“ˆ Reports & logs (admin) ๏ผ‹
Storage and sign-in statistics: capacity and usage, each user's last sign-in with IP and device, and recent sign-in history โ€” export to CSV or PDF. A rotating diagnostic log of streaming, media access and errors can be viewed or purged; it rotates automatically at 100 MB.
๐Ÿ” Domain & HTTPS certificate ๏ผ‹
In Settings, enter your domain and email and request a free Let's Encrypt certificate โ€” it secures both the web admin (HTTPS) and FTP (FTPS) and renews automatically. Point the domain's DNS at this server before requesting.
๐Ÿ”Œ Connect over FTPS ๏ผ‹
Use an FTP account's credentials with a client that supports explicit FTP over TLS in passive mode.
  • Host / Server: your server address ยท Username: the FTP account name ยท Password: that account's password
  • Encryption: Require explicit FTP over TLS (FTPS) ยท Mode: Passive
  • FileZilla / WinSCP: Protocol FTP, Encryption "Require explicit FTP over TLS", Logon Type Normal, Transfer mode Passive.
  • Each account is locked to its own folder. Behind NAT, forward the FTP control port and passive range and set the public address.
๐Ÿ“ฑ Install on your phone ๏ผ‹
ThorStorage installs as a Progressive Web App โ€” full-screen from a home-screen icon, no app store. Open it over HTTPS first.
  • Android (Chrome): open the HTTPS address, โ‹ฎ menu โ†’ "Install app" / "Add to Home screen".
  • iPhone / iPad (Safari): open in Safari, Share button โ†’ "Add to Home Screen".
  • With a Let's Encrypt certificate there's no warning; a default self-signed cert must be accepted once.
๐Ÿ›ก๏ธ Security ๏ผ‹
  • FTP is encrypted: FTPS is required and unencrypted logins are refused.
  • FTP accounts can only use FTP (no SSH/shell) and are locked to their own folder.
  • The web admin is served over HTTPS, with sign-in throttling, CSRF protection and per-tenant isolation.
๐Ÿ”’ FTPS enforced๐Ÿงฑ Per-tenant isolation๐Ÿšฆ Sign-in throttling๐Ÿ›ก๏ธ CSRF protected

Get in touch

Contact us

Questions about ThorStorage? Send us a message and we'll get back to you.

Verification image โ€” type the sum shown

See it running

Open the live demo and click around โ€” the full web admin, no install.

โ–ถ Open the live demo โ†—