Encrypted sync of SFTP sites and passwords between computers
NixSCP Pro keeps your sites and settings the same everywhere. We store only data we cannot read.
NixSCP Pro keeps your sites and site folders, stored passwords, preferences, workspaces, bookmarks, custom commands, transfer presets and open session tabs the same on all your computers, Linux and Windows. Everything is end-to-end encrypted on your computer first; the NixSCP cloud stores only ciphertext. Cloud sync is free during the public beta.
Set up sync
- Create an account on nixscp.com or with Cloud Sync › Create Account... in NixSCP.
- Sign in from NixSCP: Cloud Sync › Sign In... › Sign in with browser... and confirm in the browser. Your account password is never typed into NixSCP.
- Choose your sync password on the first computer (at least 8 characters) and save the recovery key NixSCP shows. On your other computers, enter the same sync password.
The sync password is also your NixSCP password: it encrypts the configuration on each computer, and NixSCP asks for it at startup. Once you are signed in, the menu is called Pro, and the status bar shows the sync state.
What is synced
| Synced | Stays on each computer |
|---|---|
| Sites and folders with stored passwords and all site settings, including tunnels | Window sizes, panel and column layouts |
| Preferences, workspaces, bookmarks, custom commands, transfer presets | Histories, the remote directory cache, last used folders |
| Your open session tabs, reopened at the next start on any computer | Your files: transfers always go directly to your servers |
Private key files are not uploaded, only their paths. Team sites sync with their team instead.
When it syncs, and conflicts
- At startup, every 5 minutes, when NixSCP gets focus, 10 seconds after you change something, and on exit. Pro › Sync Now syncs immediately. Open tabs follow at most once a minute.
- Every upload carries the version it is based on, so a computer that was offline never overwrites newer settings. If settings changed on two computers, NixSCP asks: Use cloud settings, Keep this computer's settings or Decide later.
- The cloud keeps the last 30 versions; NixSCP keeps a local backup (the last 10) before applying settings from another computer.
End-to-end encryption
- A key is derived from your sync password with Argon2id (64 MiB, 3 passes) on your computer.
- Data is encrypted with AES-256-GCM under a random 256-bit data key, which is stored only wrapped with your password (and optionally your recovery key).
- Each snapshot's account, type and version are authenticated: a server cannot swap, replay or roll back your data unnoticed.
- The password, the data key and your settings never reach the server in readable form. More on security.
Password, recovery and signing out
- Change NixSCP password... in Cloud Sync Settings re-wraps the data key; other computers keep the old password until they sync.
- Forgot it? Use the recovery key, then choose a new password. Without either, nobody can decrypt your synced data, by design.
- Sign Out keeps your settings on the computer and in the cloud.
- Without an active license (after the beta), settings still download, nothing is lost, and changes made here upload again once the license is active.
Questions or problems? See the FAQ, open an issue on GitHub or write to hello@codewizdev.com.