Lufi review
Lufi gives teams configurable, encrypted file drops on infrastructure they control.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Lufi is AGPL-licensed file-sharing software for uploading and sharing files through a web interface, with CLI clients also available for transfers. It suits teams that want to run file transfers on their own infrastructure and control how long files remain available. Browser-side encryption means files are encrypted before upload, and the server does not receive their contents or the encryption key. Administrators can configure maximum file size and expiration delays, as well as optional password protection and burn-after-reading mode.
Lufi is open-source and self-hosted rather than a vendor-hosted paid service, so its fit depends on whether an organization can operate its own deployment. Deployment options include Docker, Ansible and Terraform, and storage backends can be configured. Authentication can be set up with LDAP, htpasswd or HTTP headers. The listed integrations are LDAP and OpenStack Swift; the product also provides API access. These options make Lufi relevant to organizations with existing infrastructure and authentication requirements, but it is a more infrastructure-focused choice than a hosted file-transfer service.
Its core strength is a focused set of controls around file confidentiality and availability: browser-side encryption, configurable limits and expiry, optional passwords, and burn-after-reading. Those controls are administrator-configured rather than fixed by a shared service plan. Support is listed through documentation, so teams that need direct support channels should weigh that before choosing it. Lufi is a fit for small, mid-market and enterprise organizations willing to manage deployment; teams seeking a vendor-hosted service or broader listed integrations should consider another option.
Lufi pros and cons
- Where it wins
- Encrypts files in the browser before they reach the server
- Supports configurable expiry, passwords and burn-after-reading
- Offers Docker, Ansible and Terraform deployment options
- Where it doesn't
- Requires self-hosting rather than a vendor-hosted service
- Support is listed through documentation only
- Listed integrations are limited to LDAP and OpenStack Swift
Lufi fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update