Building the next generation of open-source, self-hosted file management.
FilebrowserNext is an open-source organization dedicated to maintaining and evolving a modern, secure, self-hosted web file manager.
Our flagship project — File Browser Next — is a community-driven continuation of the original File Browser, rebuilt with a focus on security hardening, modern UI, and long-term maintainability.
A modern, secure, and self-hosted web-based file manager.
File Browser Next lets you manage files directly from your browser — upload, download, preview, edit, share, and organize — all within your own infrastructure. No cloud dependency, no data leaving your server.
| Feature | File Browser Next | Original File Browser |
|---|---|---|
| Server-side JWT revocation | Yes | No |
| Session invalidation on permission change | Yes | No |
| Brute force protection on login | Yes | No |
| Hardened HTTP security headers | Yes | No |
| Shell injection filtering | Yes | No |
| Case-insensitive login | Yes | No |
| No spurious logouts on preference save | Yes | No (bug) |
| Modern glassmorphic UI | Yes | No |
| Active maintenance | Yes | Archived |
Security was the primary motivation for this fork. The original project had several open issues that were never resolved:
- No server-side token revocation — logging out did not actually invalidate the JWT (#5216)
- Command injection vulnerability — shell metacharacters were not filtered (#5199)
- No brute force protection — the login endpoint had no rate limiting
- Missing security headers — no
X-Frame-Options,X-Content-Type-Options, orPermissions-Policy
All of these are resolved in File Browser Next, with full unit test coverage.
Linux & macOS:
curl -fsSL https://raw.githubusercontent.com/FilebrowserNext/get/main/get.sh | bash
filebrowser -r /path/to/your/filesWindows (PowerShell as Admin):
iwr -useb https://raw.githubusercontent.com/FilebrowserNext/get/main/get.ps1 | iex
filebrowser -r C:\path\to\your\filesdocker run -d \
--name filebrowser \
--restart unless-stopped \
-p 8080:80 \
-v /path/to/your/files:/srv \
-v /path/to/database:/database \
ghcr.io/filebrowsernext/filebrowsernext:latest-
Linux & macOS (Nohup):
nohup filebrowser -r /path/to/your/files > filebrowser.log 2>&1 &
Stop with:
pkill filebrowser -
Windows (Silent Background):
Start-Process filebrowser -ArgumentList "-r C:\path\to\your\files" -WindowStyle Hidden
Stop with:
Stop-Process -Name filebrowser
git clone https://github.com/FilebrowserNext/filebrowserNEXT.git
cd filebrowserNEXT
pnpm --dir frontend install && pnpm --dir frontend build
go build -o filebrowser .
./filebrowser -r /path/to/your/filesOpen http://127.0.0.1:8080 (or http://<your-server-ip>:8080) — default credentials: admin / admin.
| Project | Description | Link |
|---|---|---|
| Core Project | Main application codebase and issues | FilebrowserNext/filebrowserNEXT |
| Installer Script | Automated installation scripts (get.sh, get.ps1) |
FilebrowserNext/get |
| Homebrew Tap | Formula for macOS users | FilebrowserNext/homebrew-tap |
| Docker Image | Multi-arch container image on GHCR | ghcr.io/filebrowsernext/filebrowsernext |
| Documentation | Live documentation and deployment guide | filebrowsernext.github.io/filebrowserNEXT |
| Releases | Prebuilt binaries for Linux, macOS, and Windows | Releases |
| Security Policy | Security disclosures and vulnerability reporting | SECURITY.md |
File Browser Next Contributors & File Browser Authors — Apache License 2.0