fa.to
hello@fa.to
Client-side encrypted

YOUR SERVER. YOUR KEYS.

Private cloud storage,
on your terms.

Browse, organise, preview and stream your files from Android. File contents, names, folder details and thumbnails are encrypted on your device before upload.

Download for Androidfa.to v0.14.0 APK
Android 9.0+ · Released 9 September 2026
Self-host without an accountNo app-imposed file-size limitBiometric unlockManaged vaults available
⌂Files▦

Projects

IMG_2048.jpg

Mountains.mp4

AES

Private notes.pdf

Holiday.jpg

Archive

✓ Upload complete

PRIVATE BY DEFAULT

Useful cloud storage,
without readable cloud data.

01

AES-256-GCM

Every chunk is bound to its file and position, with authenticated completeness checks.

02

Private by design

Your passphrase is never sent to fa.to or your storage provider. File contents, names, folder details and thumbnails reach the server only in encrypted form.

03

Your storage, your choice

Connect your own SFTP server without an account, or choose a managed fa.to vault.

START IN A FEW MINUTES

Quick setup

You only need the connection details supplied by your server or storage provider. Work through each card in order. Nothing is uploaded until the final connection succeeds. For provider-specific help, see the full documentation.

  1. 1
    Give the connection a name

    Choose a friendly label such as Home server or Hetzner. This only appears inside the app.

  2. 2
    Enter the server address

    Copy the SFTP hostname supplied by your provider. Use the IP address only if no hostname was supplied.

    sftp.example.com
  3. 3
    Check the port

    Most servers use port 22. Use a different number only when your provider tells you to.

    22
  4. 4
    Add your username

    Copy the SFTP or SSH username exactly as it appears in your server details.

    alex
  5. 5
    Choose how to sign in

    Select Password for a normal SFTP password. Select SSH key only if your provider gave you a private-key file.

  6. 6
    Choose the storage folder

    Enter an existing writable folder, or leave this blank to use the SFTP account's starting folder. fa.to creates its encrypted .fato-v3 directory inside it.

    /home/alex/storage
  7. 7
    Verify that it is the right server

    The SHA-256 host-key fingerprint protects you from connecting to an impersonated server. Copy the published value from your provider, including SHA256:.

    If you manage the server yourself

    Run this command in its terminal:

    ssh-keygen -lf /etc/ssh/ssh_host_ed25519_key.pub -E sha256

    From a result such as:

    256 SHA256:PZOV8b1L3opSGSxehkRZD3IaG0Ist5xTULbCd0Yusj8 root@server (ED25519)

    copy only:

    SHA256:PZOV8b1L3opSGSxehkRZD3IaG0Ist5xTULbCd0Yusj8

    You can use the warning checkbox to continue without verification, but checking the fingerprint is strongly recommended.

  8. 8
    Create your vault passphrase

    Use at least 10 characters and keep a recovery file somewhere safe. fa.to cannot reset or recover this passphrase.

  9. 9
    Connect and optionally use biometrics

    Tap Connect and unlock. After the first successful connection, you can enable fingerprint or face unlock for this device.

SMALL IMPROVEMENTS, OFTEN

What's new

0.14.0

A clearer first-open welcome screen now explains how fa.to works and the difference between hosted and self-hosted vaults. Settings are easier to navigate with Security, Health, Display and Storage sections, including new thumbnail-cache controls. In-app feedback is now shown immediately and consistently, while temporary readable files and background credentials are cleaned up more carefully.

0.13.0

Added a read-only vault health check and recovery-file verification, a storage overview, stronger Argon2id passphrase protection, pinch-to-zoom images, steadier swipe previews, improved folder view controls and quicker multi-item Trash actions. Connections can now fall back between IPv6 and IPv4 routes, completed transfers show a clearer finalising stage, and setup buttons avoid tablet navigation bars. This release also prepares the app for Google Play while keeping self-hosted and existing fa.to vault sign-in available.

0.12.1

Added a clear warning when remote storage is full and stopped those uploads from retrying forever. The app also hides the hosted sign-in option when its one managed vault is already saved.

0.12.0

Added fa.to hosted vault sign-in, location-aware plans, sharing files into fa.to, folder sorting and improved portrait video previews. The website now includes account deletion, safer node management and a destructive empty-vault reset for forgotten passphrases.

0.10.0

The new v3 vault adds resumable uploads, 30-day Trash, recovery files, changeable passphrases, auto-lock controls and a tidier navigation menu.

This release uses a new vault format and cannot open vaults created by earlier versions. Please start with a new empty vault.
0.9.11

A new encrypted vault format now detects substituted, reordered, truncated or appended file chunks. It also strengthens catalogue recovery and clears temporary credentials and opened files more carefully.

0.9.10

Uploads now show whether a file is being encrypted or uploaded. Deleting large folders is much faster because the app reuses one secure server connection.

0.9.9

Background upload notifications now include a cancel action that also stops the remaining files in that upload queue.

0.9.8

Upload progress now stays visible in a compact bubble, including the current file number when a batch is being uploaded.

0.9.7

The Upload button can now upload individual files or recreate a complete folder and its contents inside the encrypted vault.

0.9.6

The folder and upload buttons now use fa.to's softer teal colours in both light and dark mode.

0.9.5

Select and move files or folders, rename items, and choose whether matching uploads should replace or skip existing files. Uploaded files now keep their original date when Android provides it.

0.9.4

Added private-key sign-in and clearer setup for managed SFTP storage, including provider-published host fingerprints.

0.9.3

The app can now let you know when a newer download is ready. We also tidied up this page and added this changelog.

0.9.2

A neater icon and splash screen, plus sharper thumbnails for newly uploaded images and videos.

0.9.1

Swipe through media previews, see when a vault is connecting, and start typing folder names straight away.

0.9.0

Added named vault profiles, with separate thumbnails, folder views and upload queues for each one.