AudioShare Desktop
Projects, folders and invite links — with every file encrypted to your own devices before it leaves them.
macOS
11 Big Sur+xattr -dr com.apple.quarantine /Applications/AudioShare.app.
Windows
10 & 11Version — ·
How your files are kept safe
This is the agreement the installer shows you, in full. It describes exactly what the app does with your files and your keys.
You sign in with a username, an email and a password
Your account key is generated on your own machine. The server keeps two copies of it, one encrypted under your password and one under a recovery key you choose, and can open neither. It stores your email so it can send a sign-in code, and a one-way hash of your password — never the password itself.
The recovery key is yours alone
You choose it at sign-up, and it is the way back if you forget your password and lose access to the email with it. We cannot reset it, send it to you, or recover it on your behalf, because we cannot read it. Keep it somewhere safe.
Files are encrypted before they leave your device
Each track gets its own random AES-256-GCM key, and is encrypted on your machine in authenticated chunks. Only ciphertext is uploaded.
That key is kept two ways: sealed to each device you authorise with X25519 key agreement, and wrapped under a key derived from your account key. The second copy is what lets a track survive losing every device — sign in on a new machine and it opens. It also means anyone with your password who can read your email can reach your audio. That is the trade for not losing everything when a laptop dies. The server stores ciphertext and wrapped keys, and can open neither.
Access is bound to devices you approve
Every device enrols its own keypair, authorized by a signature from your account key. Requests are authenticated as a specific device, not just an account, so you can see every machine that has access and revoke any of them instantly. A revoked device loses access on its very next request, even mid-session, and can never sign in again.
What the server can and cannot see
It can see: file sizes, upload times, project and folder names, and which devices connected when. It cannot see: the contents of your audio. We keep a one-way hash of your IP address for rate limiting and abuse handling, never the address itself. There is no analytics, no telemetry and no third-party tracking in the app.
Sharing is a deliberate act
Nothing you upload is reachable by anyone else until you create a share link or invite. Share links can expire, cap their play count, require a password and forbid downloads. Invite links carry a role — listener or editor — and can be revoked or used up. Revoking either takes effect immediately.
Updates are checked, signed and optional
The app asks audioshare.org whether a newer version exists and tells you when there is one. Updates are cryptographically signed, and an update that fails signature verification is refused. You choose when to install. The app contacts no other host.
No warranty
AudioShare is provided as-is, with no uptime or durability guarantee. Keep your own copy of anything you cannot afford to lose. You are responsible for the material you upload and for holding the rights to it.