OnionShare

onionshare.org
Awesome Privacy➔ Productivity➔ File Drop➔ OnionShare
OnionShare

An open source tool that lets you securely and anonymously share a file of any size, via Tor servers. OnionShare does require installing, but the benefit is that your files are transferred directly to the recipient, without needing to be hosted on an interim server. The host needs to remain connected for the duration of the transfer, but once it is complete, the process will be terminated.

Avoid

  • wetransfer
  • send anywhere
  • filemail
  • smash

Also Consider

Open Source

OnionShare Source Code

Author

onionshare

Description

Securely and anonymously share files, host websites, and chat with friends using the Tor network

#cross-platform#file-sharing#onion-service#onionshare#open-source#python#security#tor#tor-onion-service

Homepage

https://onionshare.org/

Repository

  • LicenseOther
  • Created20 May 14
  • Primary languagePython
  • Size40,965 KB
  • Stars7,066
  • Forks711
  • Watchers7,066

Language Usage

Language Usage

Project Health

  • Last commit11 days ago
  • Open issues79
  • Latest releasev2.6.5

Top Contributors

Recent Commits

  • Saptak Sengupta(18 Aug 26)

    Merge pull request #2097 from weblate/weblate-onionshare-translations Translations update from Hosted Weblate

  • Weblate Translation Memory(18 Aug 26)

    Translated using Weblate (Esperanto) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/eo/ Translated using Weblate (Interlingua) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/ia/ Translated using Weblate (Kabyle) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/kab/ Translated using Weblate (Sinhala) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/si/ Translated using Weblate (Uyghur) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/ug/ Translated using Weblate (Tibetan) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/bo/ Translated using Weblate (Tagalog) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/tl/ Translated using Weblate (Armenian) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/hy/ Translated using Weblate (Belarusian) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/be/ Translated using Weblate (Filipino) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/fil/ Translated using Weblate (Tamil) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/ta/ Translated using Weblate (Bosnian) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/bs/ Translated using Weblate (Vietnamese) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/vi/ Translated using Weblate (Albanian) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/sq/ Translated using Weblate (Galician) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/gl/ Translated using Weblate (Kurdish (Sorani)) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/ckb/ Translated using Weblate (Slovak) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/sk/ Translated using Weblate (Lithuanian) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/lt/ Translated using Weblate (Croatian) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/hr/ Translated using Weblate (Afrikaans) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/af/ Translated using Weblate (Serbian (Latin script)) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/sr_Latn/ Translated using Weblate (Swahili) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/sw/ Translated using Weblate (Ukrainian) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/uk/ Translated using Weblate (Khmer (Central)) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/km/ Translated using Weblate (Telugu) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/te/ Translated using Weblate (Hindi) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/hi/ Translated using Weblate (Malay) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/ms/ Translated using Weblate (Shona) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/sn/ Translated using Weblate (Japanese) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/ja/ Translated using Weblate (Hebrew) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/he/ Translated using Weblate (Bulgarian) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/bg/ Translated using Weblate (Swedish) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/sv/ Translated using Weblate (Yoruba) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/yo/ Translated using Weblate (Amharic) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/am/ Translated using Weblate (Gujarati) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/gu/ Translated using Weblate (Bengali) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/bn/ Translated using Weblate (Korean) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/ko/ Translated using Weblate (Chinese (Traditional Han script)) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/zh_Hant/ Translated using Weblate (Chinese (Simplified Han script)) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/zh_Hans/ Translated using Weblate (Slovenian) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/sl/ Translated using Weblate (Polish) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/pl/ Translated using Weblate (Macedonian) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/mk/ Translated using Weblate (Indonesian) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/id/ Translated using Weblate (Arabic) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/ar/ Translated using Weblate (Portuguese (Portugal)) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/pt_PT/ Translated using Weblate (Portuguese (Brazil)) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/pt_BR/ Translated using Weblate (Romanian) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/ro/ Translated using Weblate (Punjabi) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/pa/ Translated using Weblate (Persian) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/fa/ Translated using Weblate (Irish) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/ga/ Translated using Weblate (Icelandic) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/is/ Translated using Weblate (Hungarian) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/hu/ Translated using Weblate (Greek) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/el/ Translated using Weblate (Georgian) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/ka/ Translated using Weblate (Catalan) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/ca/ Translated using Weblate (Turkish) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/tr/ Translated using Weblate (Russian) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/ru/ Translated using Weblate (Norwegian Bokmål) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/nb_NO/ Translated using Weblate (Dutch) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/nl/ Translated using Weblate (Italian) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/it/ Translated using Weblate (French) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/fr/ Translated using Weblate (Finnish) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/fi/ Translated using Weblate (Spanish) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/es/ Translated using Weblate (German) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/de/ Translated using Weblate (Danish) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/da/ Translated using Weblate (Czech) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/cs/

  • Saptak Sengupta(18 Aug 26)

    Merge pull request #2095 from citizen204/fix-983-translatable-true-false fix: make Test Connection to Tor result strings translatable

  • citizen204(17 Aug 26)

    fix: make Test Connection to Tor result strings translatable Fixes #983

  • Saptak Sengupta(31 Jul 26)

    Merge pull request #2093 from weblate/weblate-onionshare-translations Translations update from Hosted Weblate

  • Aindriú Mac Giolla Eoin(30 Jul 26)

    Translated using Weblate (Irish) Currently translated at 100.0% (9 of 9 strings) Translation: OnionShare/Doc - Help Translate-URL: https://hosted.weblate.org/projects/onionshare/doc-help/ga/ Translated using Weblate (Irish) Currently translated at 100.0% (11 of 11 strings) Translation: OnionShare/Doc - Security Translate-URL: https://hosted.weblate.org/projects/onionshare/doc-security/ga/ Translated using Weblate (Irish) Currently translated at 100.0% (163 of 163 strings) Translation: OnionShare/Doc - Advanced Translate-URL: https://hosted.weblate.org/projects/onionshare/doc-advanced/ga/ Translated using Weblate (Irish) Currently translated at 100.0% (62 of 62 strings) Translation: OnionShare/Doc - Features Translate-URL: https://hosted.weblate.org/projects/onionshare/doc-features/ga/

  • Jonatan Nyberg(30 Jul 26)

    Translated using Weblate (Swedish) Currently translated at 100.0% (27 of 27 strings) Translation: OnionShare/Doc - Develop Translate-URL: https://hosted.weblate.org/projects/onionshare/doc-develop/sv/ Translated using Weblate (Swedish) Currently translated at 100.0% (9 of 9 strings) Translation: OnionShare/Doc - Help Translate-URL: https://hosted.weblate.org/projects/onionshare/doc-help/sv/ Translated using Weblate (Swedish) Currently translated at 100.0% (2 of 2 strings) Translation: OnionShare/Doc - Index Translate-URL: https://hosted.weblate.org/projects/onionshare/doc-index/sv/ Translated using Weblate (Swedish) Currently translated at 100.0% (74 of 74 strings) Translation: OnionShare/Doc - Install Translate-URL: https://hosted.weblate.org/projects/onionshare/doc-install/sv/ Translated using Weblate (Swedish) Currently translated at 100.0% (11 of 11 strings) Translation: OnionShare/Doc - Security Translate-URL: https://hosted.weblate.org/projects/onionshare/doc-security/sv/ Translated using Weblate (Swedish) Currently translated at 100.0% (54 of 54 strings) Translation: OnionShare/Doc - Tor Translate-URL: https://hosted.weblate.org/projects/onionshare/doc-tor/sv/ Translated using Weblate (Swedish) Currently translated at 100.0% (163 of 163 strings) Translation: OnionShare/Doc - Advanced Translate-URL: https://hosted.weblate.org/projects/onionshare/doc-advanced/sv/ Translated using Weblate (Swedish) Currently translated at 100.0% (62 of 62 strings) Translation: OnionShare/Doc - Features Translate-URL: https://hosted.weblate.org/projects/onionshare/doc-features/sv/ Translated using Weblate (Swedish) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/sv/

  • Saptak Sengupta(28 Jul 26)

    Merge pull request #2088 from onionshare/release-2.6.5 Release 2.6.5

  • Saptak Sengupta(20 Jul 26)

    Merge pull request #2092 from weblate/weblate-onionshare-translations Translations update from Hosted Weblate

  • Himmel(18 Jul 26)

    Translated using Weblate (Japanese) Currently translated at 100.0% (62 of 62 strings) Translation: OnionShare/Doc - Features Translate-URL: https://hosted.weblate.org/projects/onionshare/doc-features/ja/

  • Dubrovsky(18 Jul 26)

    Translated using Weblate (Russian) Currently translated at 100.0% (74 of 74 strings) Translation: OnionShare/Doc - Install Translate-URL: https://hosted.weblate.org/projects/onionshare/doc-install/ru/

  • mig5(08 Jul 26)

    Merge pull request #2089 from weblate/weblate-onionshare-translations Translations update from Hosted Weblate

  • 109247019824(07 Jul 26)

    Translated using Weblate (Bulgarian) Currently translated at 100.0% (74 of 74 strings) Translation: OnionShare/Doc - Install Translate-URL: https://hosted.weblate.org/projects/onionshare/doc-install/bg/

  • Saptak Sengupta(07 Jul 26)

    Merge pull request #2084 from onionshare/mig/run-cli-web-in-thread Fix Python 3.14 compatibility in range request live-server tests

  • Miguel Jacq(07 Jul 26)

    Update flatpak deps

  • Miguel Jacq(07 Jul 26)

    Update Tor to 0.4.9.11

  • Miguel Jacq(07 Jul 26)

    Change version to 2.6.5

  • Miguel Jacq(07 Jul 26)

    Update Desktop poetry dependencies

  • Miguel Jacq(07 Jul 26)

    Update CLI poetry dependencies

  • mig5(07 Jul 26)

    Merge pull request #2085 from weblate/weblate-onionshare-translations Translations update from Hosted Weblate

  • Mona Lisa(06 Jul 26)

    Translated using Weblate (Swedish) Currently translated at 100.0% (27 of 27 strings) Translation: OnionShare/Doc - Develop Translate-URL: https://hosted.weblate.org/projects/onionshare/doc-develop/sv/ Translated using Weblate (Swedish) Currently translated at 100.0% (74 of 74 strings) Translation: OnionShare/Doc - Install Translate-URL: https://hosted.weblate.org/projects/onionshare/doc-install/sv/ Translated using Weblate (Swedish) Currently translated at 100.0% (54 of 54 strings) Translation: OnionShare/Doc - Tor Translate-URL: https://hosted.weblate.org/projects/onionshare/doc-tor/sv/ Translated using Weblate (Swedish) Currently translated at 100.0% (62 of 62 strings) Translation: OnionShare/Doc - Features Translate-URL: https://hosted.weblate.org/projects/onionshare/doc-features/sv/ Translated using Weblate (Swedish) Translate-URL: https://hosted.weblate.org/projects/onionshare/translations/sv/

  • curtisb(06 Jul 26)

    Translated using Weblate (German) Currently translated at 100.0% (74 of 74 strings) Translation: OnionShare/Doc - Install Translate-URL: https://hosted.weblate.org/projects/onionshare/doc-install/de/

  • Miguel Jacq(21 Jun 26)

    Fix Python 3.14 compatibility in range request live-server tests. Looks like Python 3.14 uses forkserver as the default start method. We previously started a local run() function which passed it to multiprocessing.Process, which works under fork but fails under forkserver, because local functions must be pickleable. Switch to running Wekzeug in a thread which avoids needing to pickle a local process target at all.

  • Saptak Sengupta(15 Jun 26)

    Merge pull request #2083 from weblate/weblate-onionshare-translations Translations update from Hosted Weblate

  • Himmel(14 Jun 26)

    Translated using Weblate (Japanese) Currently translated at 100.0% (74 of 74 strings) Translation: OnionShare/Doc - Install Translate-URL: https://hosted.weblate.org/projects/onionshare/doc-install/ja/

  • Aindriú Mac Giolla Eoin(14 Jun 26)

    Translated using Weblate (Irish) Currently translated at 100.0% (74 of 74 strings) Translation: OnionShare/Doc - Install Translate-URL: https://hosted.weblate.org/projects/onionshare/doc-install/ga/

  • Ecron(14 Jun 26)

    Translated using Weblate (Catalan) Currently translated at 100.0% (9 of 9 strings) Translation: OnionShare/Doc - Help Translate-URL: https://hosted.weblate.org/projects/onionshare/doc-help/ca/

  • Maryam Azad(14 Jun 26)

    Translated using Weblate (Persian) Currently translated at 100.0% (74 of 74 strings) Translation: OnionShare/Doc - Install Translate-URL: https://hosted.weblate.org/projects/onionshare/doc-install/fa/

  • Saptak Sengupta(10 Jun 26)

    Merge pull request #2079 from weblate/weblate-onionshare-translations Translations update from Hosted Weblate

  • mig5(10 Jun 26)

    Merge pull request #2081 from GautierPicon/update-license-year License: change copyright year to 2026

OnionShare Security

6.2/10

Repo Security Summary

Updated 17 Aug 26

  • Maintained10/10
  • CII-Best-Practices0/10
  • Code-Review10/10
  • Dangerous-Workflow10/10
  • Token-Permissions0/10
  • PackagingN/A
  • Security-Policy0/10
  • Fuzzing0/10
  • License9/10
  • Binary-Artifacts10/10
  • Pinned-Dependencies0/10
  • Branch-ProtectionN/A
  • Signed-Releases8/10
  • SAST9/10

Security Advisories (11)

  • mediumPatchedCVSS 5.4

    CVE-2026-54707OnionShare Receive mode writes uploaded files even when file uploads are disabled

  • mediumPatchedCVSS 4.8

    CVE-2026-54706OnionShare follows symlinks in shared directories, allowing unintended disclosure of local files

  • lowPatched

    CVE-2022-21696OTF-005: Improper Input Sanitation: It is possible to change the username to that of another chat participant with an additional space character at the end of the name string

  • lowPatched

    CVE-2022-21694OTF-006: Broken Website Hardening Control: The CSP can be turned on or off but not configured for the specific needs of the website

  • lowPatched

    CVE-2022-21695OTF-009: Improper Access Control: Authenticated users (or unauthenticated in public mode) can send messages without being visible in the list of chat participants

  • lowPatched

    CVE-2022-21693OTF-013: Improper Hardening: The filesystem restriction could be hardened and should only allow for pre-defined subfolders

  • mediumPatched

    CVE-2022-21692OTF-003: Improper Access Control: Anyone with access to the chat environment can write messages disguised as another chat participant

  • mediumPatched

    CVE-2022-21691OTF-004: Improper Access Control: Chat participants can spoof their channel leave message, tricking others into assuming they left the chatroom

  • mediumPatched

    CVE-2022-21689OTF-012: Denial of Service: The receive mode limits concurrent uploads to 100 per second and blocks other uploads in the same second, which can be triggered by a simple script

  • highPatched

    CVE-2022-21690OTF-001: Improper Input Sanitation: The path parameter of the requested URL is not sanitized before being passed to the QT frontend

  • highPatched

    CVE-2022-21688OTF-014: Out-of-bounds Read: The desktop application was found to be vulnerable to denial of service via an undisclosed vulnerability in the QT image parsing

OnionShare Website

Website

OnionShare

OnionShare is a tool for anonymous peer-to-peer file sharing, chatting, and web hosting.

Redirects

Does not redirect

Security Checks

All 65 security checks passed

Server Details

  • IP Address178.128.10.165
  • Hostnameonionshare.org
  • LocationSanta Clara,California,United States of America,NA
  • ISPDigitalOcean LLC
  • ASNAS14061

Associated Countries

  • USUS

Safety Score

Website marked as safe

100%

Blacklist Check

onionshare.org was found on 0 blacklists

  • AntiSocial Blacklist
  • Artists Against 419
  • Badbitcoin
  • Bambenek Consulting
  • CERT Polska
  • CoinBlockerLists
  • CRDF
  • CryptoScamDB
  • EtherAddressLookup
  • EtherScamDB
  • Fake Website Buster
  • MetaMask EthPhishing
  • NABP Not Recommended Sites
  • OpenPhish
  • PetScams
  • PhishFeed
  • PhishFort
  • Phishing.Database
  • PhishStats
  • PhishTank
  • Phishunt
  • RPiList Not Serious
  • Scam.Directory
  • SecureReload Phishing List
  • Spam404
  • StopGunScams
  • Suspicious Hosting IP
  • ThreatFox
  • ThreatLog
  • TweetFeed
  • URLhaus
  • ViriBack C2 Tracker

Website Preview

Website preview
View full report atweb-check.xyz

OnionShare Reviews

More File Drop

  • FileSend

    FileSend

    filesend.standardnotes.org

    Simple, encrypted file sharing, with a 500mb limit and 5-day retention. Files are secured with client-side AES-256 encryption and no IP address or device info is logged. Files are permanently deleted after download or after specified duration. Developed by StandardNotes, and has built-in integration with the SN app.

    Open Source standardnotes/FileSend
    View FileSend Report
View More...

About the Data: OnionShare

Edit OnionShare Data

You can edit OnionShare's entry in this section of awesome-privacy.yml by submitting a PR to our GitHub repo.
Note that some of the information shown above has been aggregated from external sources, a list of these can be found data documentation.

Origin Data

Modify Data

Delete OnionShare Submit Edit to OnionShare Add alternative

API

You can access OnionShare's data programmatically via our API. Simply make a GET request to:

https://api.awesome-privacy.xyz/v1/services/onionshare

The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.

Share OnionShare

Help your friends compare File Drop, and pick privacy-respecting software and services.
Share OnionShare and Awesome Privacy with your network!

← Previous

FileSend

View File Drop (2)