Roadmap

Teams plan — end-to-end encrypted team vaults, admin console, per-seat billing

Bring your own storage (BYOS) — your S3 bucket instead of ours: R2, S3, B2, Wasabi, Scaleway, OVHcloud

Theme workshop — compose background, surfaces, text, accent and borders, with three animated backdrops

Layout template marketplace — publish and install, end-to-end signed packages

Modular home — a composable block grid, encrypted and synced across devices

"Manage vault" page — members, invitations, activity, settings, key, trash, freeze

Databases inside notes — four views, typed properties, relations and rollups

Full Notion import — images, databases and attachments included

Sandboxed plugin system + end-to-end signed marketplace

End-to-end encrypted shared vaults, open to every paid plan

End-to-end encrypted real-time collaboration (CRDT) — the server only relays opaque bytes

app.filarr.com web client — in-browser decryption, passkey unlock

Full Obsidian import + publishing a local vault to your account without ever re-sealing

"Protect in place" (.filarr), tray icon, compact mode and Explorer right-click

Filarr Send — direct upload, per-plan limits, speed and time remaining

Delta sync + direct transfer — files up to 5 TB, video/audio streaming

Streaming encryption — flat memory, ~550 MB/s, per-block authentication

7z / RAR5 preview and decompression — hand-written engine, verified byte for byte

"Open with…", .docx, CSV/TSV, .ics and comparison between two file versions

Customizable folders (color, icon, cover) + exportable layouts

Hardware security key (WebAuthn / FIDO2) and hidden vault / decoy mode

Encrypted file sharing — temporary links with expiry, max views and password

Web clipper — browser extension to save pages straight into Filarr

Filarr’s source code goes public — desktop client published on GitHub under BSL 1.1 for audit

Electron 39 → 41 — 18 CVEs fixed + electron-builder 24 → 26

Full Electron fuses (8 fuses, strictlyRequireAllFuses)

HKDF-SHA-256 on the ECDH secret for multi-device pairing

Full security audit — 24 findings, 8 runtime CVEs fixed

IPC hardening — import path whitelist + ZIP bomb protection

CSPRNG for all UUIDs + timing-safe hash comparison

Upgrade jspdf/axios/dompurify — fixes 1 critical and 8 high CVEs

Focus / Pomodoro timer with floating widget and 90-day stats

Forest theme — deep pine-green with canopy and fireflies

Atkinson Hyperlegible font for visual accessibility

Zero-knowledge cloud sync — AES-256-GCM, Cloudflare R2 storage

Secure multi-device pairing — ECDH P-256 key exchange

Subscription plans & Stripe integration

Auto-lock & enhanced lock mode

Exportable recovery key (PBKDF2 + AES-GCM)

filarr.com/account — device, subscription & account management

Import from Obsidian — 4-step wizard, wiki-links, tags, callouts

Canvas2D graph with Barnes-Hut — 10-50x faster, 2000+ nodes support

Virtualized NotesList — smooth scrolling with thousands of notes

5 new themes: Space, Lofi, Sky, Sakura, Crépuscule

Encryption password & recovery phrase at onboarding

Full vault import / export (encrypted ZIP)

Frameless window (VS Code / Obsidian style)

Built-in wiki translated EN/FR (170+ keys)

Multi-profile system with FEK isolation & encryption