Encrypted peer-to-peer backup.
Your data, your hardware, your rules.
Rhizo backs up your files by encrypting them locally, splitting them into content-addressed chunks, and replicating them across your own devices over your local network. No cloud. No accounts. No servers. Just your machines, talking directly to each other.
Rhizo has two binaries. Download both to the same directory.
Every binary is signed with minisign. Install it with your package manager, then verify:
$ minisign -Vm rhizo -P RWQ6U6lekmfZ4DFh0EZOcovhUTiVxXBlb0EyJMRKVsWj63jadGiKtlkg
After downloading both files, open a terminal in your downloads folder and run:
# Make them executable $ chmod +x rhizo rhizo-node # Move them to a system directory so you can run them from anywhere $ sudo mv rhizo rhizo-node /usr/local/bin/ # Verify they work $ rhizo --help
This creates your encrypted vault at ~/.rhizo. You'll be asked to create a password. This password encrypts your master key — every backup operation will ask for it. There is no password recovery, so remember it or store it somewhere safe.
$ rhizo init Initializing rhizo... Create a password (this protects everything): <-- type password, nothing shows Confirm password: <-- type it again ✓ Network created: rhizo-a1b2c3d4 ✓ Node name: your-hostname
Point rhizo at any directory. It splits your files into chunks, encrypts each one, and stores them in the vault. You'll be prompted for your password. Run it again anytime — unchanged files are skipped automatically.
$ rhizo backup ~/Documents Password: <-- your vault password, nothing shows as you type Backed up 42 files (128 chunks, 54.2 MB)
Run rhizo-node on each machine you want to sync. Devices on the same WiFi or LAN discover each other automatically and replicate missing chunks in both directions. Keep it running in the background.
$ rhizo-node Password: <-- same vault password Listening on /ip4/0.0.0.0/tcp/4001 Discovered peer: sarah-macbook (192.168.1.42) Syncing... 128/128 chunks
Repeat on every device. As long as two or more machines are running rhizo-node, your vault stays in sync.
Recover your files from the vault to any directory. Rhizo decrypts each chunk and reassembles the original files and folder structure.
$ rhizo restore ~/Recovered Password: <-- same vault password Restored 42 files to /home/you/Recovered
Encrypted always. ChaCha20-Poly1305 with no option to disable it. Your data is unreadable without your key, even on your own disk.
No servers. Devices find each other on your local network. There are no cloud services, no accounts, no third parties.
Content-addressed. Every chunk is identified by its hash. Duplicates are stored once. Corruption is detected automatically.
Simple and auditable. Small Rust codebase. Minimal dependencies. If you can't explain how it works, you can't trust it.
Yours forever. AGPLv3. No license server. Works fully offline. If we disappear, your data doesn't.