Your files are yours alone to see
End-to-end encrypted (E2EE) cloud storage. Not even NMTS can open your files.
No email, phone number, name or password.
Upload files and folders.
Open them on another device with the same key.
Send them to another NMTS user.
On the server, even file and folder names are stored encrypted.
An ordinary cloud like Google Drive or Dropbox receives your photo as it is.
The key is on the server too, so the photo can be opened there.
End-to-end encryption (E2EE) encrypts the photo on your device first.
The key stays on your device, so the server only gets data it cannot read.
Other E2EE clouds keep the data on their own servers. A blocked account cannot reach its files.
NMTS spreads that data across many computers of a decentralized storage network.
If NMTS disappears, your key and recovery list still bring your files back for the time you paid for.
Lose the key and you cannot open them either. Write down your recovery phrase.
Upload the same photo to Google Drive and to NMTS.
Google Drive receives the photo as it is.
NMTS receives data encrypted on your device.
Google Drive's automated scanning analyzes the photo that arrived. Source
Without the key, the data that reached NMTS is meaningless numbers.
So NMTS cannot scan it, and cannot flag it by mistake.
When scanning flags a harmless photo by mistake, Google can still suspend the account. Source
In 2021, a father lost his Google account over a photo of his child taken for a doctor.
In 2022, Google Drive blocked sharing of a file holding only the number 1, citing copyright.
Police found no crime. The account was not restored.
The New York Times · 2022-08-21The request for review was blocked too.
The Register · 2022-01-25Police found no crime. The account was not restored.
The New York Times · 2022-08-21The request for review was blocked too.
The Register · 2022-01-25NMTS is free. You pay only for storage, directly to the storage network.
The encryption code that runs on your device is public. The server and web app code is not.
The recovery tool that gets your files back without NMTS is public too.
Terminals and AI agents use NMTS through the CLI; other programs use the SDK.
One person, needmoretruth, builds and runs NMTS.
No ads, no data sales, no fees. The only money NMTS receives is voluntary donations.
Files never pass through the NMTS server, so it costs under $50 a month, paid by the developer.
FAQ
How is NMTS free? Are you selling my data, or showing ads?
No. Nothing about you is sold and there are no ads. Honestly, I run NMTS at a loss.
I am one developer, and a geek who loves technology, especially cryptocurrency and privacy. No company behind me, no co-workers, and NMTS is what came out of building on a tight budget anyway.
The core of it is that I do not relay your data. A file is encrypted in your browser and goes straight to Walrus, so my server never holds a file, and a server with no files has no disks to buy and no traffic to pay for.
Running costs and income
Even counted generously, and with the domain included, running NMTS costs me less than 50 dollars a month. That number leaves out the time I spend building it.
There is a donation feature, but it is optional, and right now the income is zero. It is still one of the most fun projects I have ever had.
So if donating is not for you, send me a bug or an idea instead. I will read it gladly.
needmoretruth, who are you?
Someone who really loves technology. Cryptocurrency most of all, and with it the things that come attached: cryptography, privacy and economics. I am not a cryptographer, not a genius programmer and not some hacker in the dark. I am a geek, and that is the whole description.
The name has a history that is both complicated and simple. When I picked a GitHub handle it was the first thing that came to mind, nobody else had it, so I kept it, and the matching domain happened to be free too.
There is no success story. I have loved computers since I was a kid, and philosophy and logic along with them. Mathematics I liked as an idea and disliked in practice, so I did not do much of it. I love ZK proofs, the kind that prove a thing without showing it, and I wanted them in NMTS, but there was no place where they belonged, so they are not in it.
My GitHub is full of things I built because they suddenly came to me. I daydream a lot, and when one idea sticks I write it in a notebook, and if it does not get in the way of NMTS, or I want it too badly, I build it. Usually my interest fades once the prototype and the skeleton are there, and I move on. NMTS is the first project I have carried this deep and this long without losing interest.
This may sound like a pose, but I am hopeless at marketing and money is not the goal. I do like money. With more of it I would build a dedicated server and spend a fortune on AI. I would not buy a supercar; to me the luxury life is being able to think and build what I thought of without having to work for it. Money is the means to that.
What are you really after? Why build this at all? Is it a honeypot?
I can see how it might look that way. There are several reasons, but the one at the centre is simple: this is fun for me. As I keep saying, I love technology. If I had to choose between technology and a relationship, I would choose technology, though I suppose one can have both. I do this because it interests me and I enjoy it, and I honestly doubt anyone would do this much for nothing otherwise.
Calling it volunteering is a stretch. But if someone stays up nights building a system, ships it, pays for a free trial, publishes the source and still earns nothing from it, then either they expect to earn far more later or the fun outweighs the loss. For me the second is the bigger part, with a little of the first.
A honeypot needs something to catch, and there is nothing here to catch. My server never holds a file it can read, you never gave it a name or an email, and the key never leaves your device. The parts you would have to take on faith are the published ones, and the recovery program gets your files back with no NMTS at all.
And who I am: I, needmoretruth, am Korean, born in Korea and living here. But going to the United States has been my wish since I was a child, and from high school on it was the first thing I meant to achieve in life. It still is: emigrating to the United States, to Texas, is my biggest goal.
If I get there, I will almost certainly, 99 % or so, change my legal name to Need More Truth, found a company called NeedMoreTruth, and move what I have been building in Korea under it. From where I stand the EB-3 skilled-worker route looks the most realistic; it is hard, and an O-1 would be wonderful if it were ever possible. Whatever the route and however many years it takes, I am going. If one day I have moved and read this answer again, I will be glad it is here.
Why are there no ads and no paid tiers?
Not because I am a nice person.
First, I hate carrying legal risk, and every ad network and every payment processor brings some.
Second, running NMTS costs very little. If it had cost a lot, I would not have made it paid; I would have found a way to make it cheap, or not built it at all.
Third, and this is the real one: until there are thousands of users, not charging is a better deal for me than charging. It keeps me further from legal trouble, and I am not going to hand my identity to an ad network to earn a few cents.
About Tusky…
I was lying in bed daydreaming, as I do, thinking about Sui, which I was into at the time. That led me to Walrus, and digging further I sketched a first NMTS prototype in my head, and digging further still I found out Tusky existed.
Tusky was an end-to-end encrypted storage on Walrus, and on Walrus it was the dinosaur. By its own numbers: 77.4 TB of raw data, 45.7 million files, 47 thousand uploading accounts in its last month alone. On 19 December 2025 it announced a shutdown, said the app, API and public aggregator would run through 19 January 2026, and later said on its X account that, with support from the Walrus side, the retrieval window was extended by 60 days to 19 March 2026. Billing stopped that day and December payments were refunded.
The official reason, in their words: it had demonstrated clear adoption but had not reached profitability, and fundraising had not progressed within the timeframe required. In plain words: it spent more than it earned.
What users were left with, per the retrieval guide, was downloading each storage space in turn or exporting blob IDs to move to another tool. The files themselves stayed on Walrus, but which pieces were yours and how to open them went through Tusky's app and API.
Meanwhile I had been chewing on three problems stacked together, legal, economic and technical, and what came out at the end was this: NMTS relays only metadata, and the files go between you and Walrus directly. And Tusky's situation is assumed from the start: keep a downloaded recovery list and the standalone recovery tool opens your files with no NMTS server at all.
NMTS uses none of Tusky's code, assets or trademarks. I still think of it as a fine predecessor that walked the road on Walrus first, at scale and bravely. Shutting down is a pity. I am a geek with no money, so I built NMTS to run on about 50 dollars a month, out of my own pocket, with no income.
If users suddenly multiply, will the server fall over or the bills explode?
Half right, half wrong. File bytes never pass through my server. Your browser encrypts the file, cuts it into Walrus pieces and sends them straight to a Walrus upload relay and the storage nodes. What the server gets per upload is two small requests: a registration record of a few hundred bytes and the index of your encrypted file list, a few KB. So however many users and files there are, the server's traffic and work stay tiny and do not depend on file size.
In numbers, as of 6 September 2026 at midnight UTC: on the same machine as this server, running the same server image in the test stack, it took up to about 930 upload registrations per second with no failures. So 500 people each uploading a 3 MB photo every second is comfortably within that.
It is not perfect. At several times that, answers slow down and the per-account and per-address request limits answer first with "try again shortly" (429). The server queues rather than dies. Peaks are not sustained either. Files uploaded with credits carry one chain transaction each, so they are slower and have a daily cap.
The bill does not multiply with requests. Cloudflare stands in front and the server is my own local machine rather than a VPS, so ten times the requests is not ten times the invoice. I think it likely stays under 50 dollars a month.
How it was measured
One "upload" was replayed exactly as the server receives it: one file registration request (POST /v1/items) and one write of the encrypted file list's index, 4 KB (PUT /v1/manifest). File bytes never reach the server, so they are not part of it.
First run: 700 accounts, 24 concurrent requests, 10 seconds. 8,663 registrations, 864 per second, 0 failures, 16 ms and 12 ms per request on average. Second run: 1,300 accounts, 48 concurrent requests, 10 seconds. 9,308 registrations, 929 per second, 0 failures, 29 ms and 23 ms. Doubling the concurrency left the rate almost unchanged and doubled the latency, so that is about the ceiling of this setup.
During the runs the server process used about 1.6 CPU cores and the database about 3.7. What sets the ceiling is not the CPU but the 10 connections the server opens to the database. The live server and the test stack share this machine, so the sentence above uses 500, a little over half of what was measured.
Why a local server instead of a VPS (AWS, GCP and the like)? Is that not risky?
The cheap answer first: I have no money. A stable, predictable bill I could live with, but a setup where a traffic spike melts my money is more than I can carry, and a VPS is too expensive for me. I have always been at home on Linux, so NMTS runs on a mini PC with Ubuntu Server.
The risks are power and the disk. In a power cut it stops until power returns, then the containers bring themselves back (restart policy: always). If memory runs short, a watchdog kills the largest process before the whole machine freezes. And the power cord is secured so it does not get pulled.
Backups: the database goes to Cloudflare R2 every day at 03:30 UTC (locked for the first 7 days so it cannot be deleted), plus an hourly copy whenever something changed. I have actually restored from it, on the day the backup was made. And if the server is down, your files are still on Walrus; with a downloaded recovery list the recovery tool opens them without the server. What the server could lose is the encrypted lists, and those are what the backups hold.
If money or real income ever arrives, moving to a VPS is something I seriously consider.
Why Cloudflare? You said you cared about privacy.
I bought the domain at Cloudflare, and a Cloudflare Tunnel hides my IP (there is no port forwarding). The core of it: I have no power to stop a DDoS. Putting Cloudflare in front filters out countless attacks by itself, it is fast, it caches well, and it is free. The human check (Turnstile), the lock in front of the admin screen (Access), the backup store (R2) and the watchdog that checks the server from outside all run there too.
It is one more third party to trust, yes. TLS ends at Cloudflare, so Cloudflare sees what my server sees: ciphertext, counts, sizes and times, and your address. File bytes go from your browser straight to Walrus and never pass Cloudflare. Keys pass nowhere.
Why I think that is acceptable, two reasons. What passes is already ciphertext, so nothing opens because Cloudflare saw it; and Cloudflare publishes government-request statistics in a transparency report and has a published policy of notifying customers unless the law forbids it. Without Cloudflare I would have to open a port, expose my IP, and that IP would be eaten alive by DDoS.
You are one person. If you stop developing, or switch the server off, what happens to my files?
They stay where they are. Your files are not on my server. They are on Walrus, a public storage network, encrypted, for the period that was paid for. My server going away does not remove a byte of them.
Getting them back without me is what nmts-recovery is for: one open-source program for Linux, macOS and Windows. Give it your NMTS key and your recovery list and it fetches the pieces from public Walrus nodes, decrypts them and writes your files out. It contacts no NMTS server at any point, because it needs nothing a server has: every key comes from your NMTS key, and where each piece sits is in the recovery list. It uses the same published encryption engine as the browser, so a file encrypted here opens there.
The recovery list is the one thing to keep. You can download it from the account screen, and you can switch on a copy on the storage network itself: for the uploads you make after switching it on, your NMTS key alone is then enough, because the program derives your wallet address from it and reads the list from a public node, with nothing of NMTS left standing. The copy is a switch rather than the default because it rides in an upload you pay for.
One limit, plainly: files paid for with credits sit on storage the donation pool bought, and you cannot extend that period yourself. Files paid from your own wallet belong to that wallet on the chain, and their period can be extended by whoever holds that wallet.
If the recovery program works without any server, what is NMTS for?
For every day. Walrus stores bytes; it does not encrypt them, name them, keep folders, send one file to one person, take a payment in credits, or open on a phone. NMTS is that layer: the encryption, the file list, sharing, the wallet and the credits, the screens and the terminal tool. The recovery program is the exit, not the product.
Why the exit exists at all: as you know by now, NMTS is not run by a genius developer or a rich businessman, and people rightly dislike being tied to something like that. So the parts you would otherwise have to take on faith are open source, and the recovery program removes the single point of failure, which is me. That seemed to me the only way a project like this survives while opening up ground nobody had taken.
What is your vision?
In one sentence: NMTS becomes the single giant that takes the whole drive market. I am one developer, so that road does not come from my hands but from an SDK that lets people put NMTS into their products easily, and from a base people can build a business on with NMTS as the backend.
For storage I added Filecoin to Walrus as NMTS Heavy in September 2026, and I plan to add Arweave. The fee is 0 % and NMTS stays non-profit. The long version is on the vision page.
How can I help?
With feedback, more than with money. Found a bug? Report it, however small, and even if you are not sure it is one. Where the buttons sit and how the screen looks count too. Missing a feature, or dislike one? Tell me. And if you just want to say something, send an inquiry about anything, or about nothing in particular.
The code that matters is public: the CLI, the SDK, the encryption engine and the recovery tool are on GitHub, and a bug report there works just as well. There is a Discord server, and I am on X.
If you do want to give something, you can do it from the Wallet screen in the app, and the hall of fame lists everyone who did. Nothing is owed for it and nothing comes back for it; the terms say so in full.
One NMTS key is your account.
Making the key takes about ten seconds.