Encrypting files on your own machine and putting them in a bucket you rent is a small program, and an agent can write a sync tool with chunking, encrypted names and restores in a sitting. The weekend goes on what makes Drive feel like a drive: desktop sync that copes with renames and conflicts, phone apps with photo backup, share links that carry their own key, and shared document editing. rclone with its crypt layer, Cryptomator or Syncthing cover most of that without a subscription, and rented bucket storage is usually cheaper per GB than the plan.
Before you buildProton Free gives 5 GB with the same encryption. If your files fit, you don't need Drive Plus or this tool.
Build me an encrypted folder sync tool to replace Proton Drive Plus for my own files. Requirements: - Go 1.23: one binary `vaultsync` with the commands `init`, `sync`, `watch`, `restore`, `share` and `verify`. Settings go in ~/.config/vaultsync/config.toml (local folder, bucket, endpoint); S3 keys and VAULT_PASSPHRASE come from .env or the macOS Keychain. - Encryption happens on my machine only: files are cut into 4 MiB chunks, encrypted with XChaCha20-Poly1305 (`golang.org/x/crypto`) under keys derived from the passphrase with Argon2id. File names and folder paths are encrypted too, so the bucket shows random object names and sizes. - Storage: an encrypted manifest object in the S3-compatible bucket (`aws-sdk-go-v2`) and a local SQLite cache (`modernc.org/sqlite`) with path, size, mtime and chunk hashes. Chunks are addressed by content hash, so an unchanged chunk is never uploaded twice. - `sync` uploads local changes and downloads remote ones. When both sides changed a file, keep both and name the older "<name> (conflict <date>)". Deleted files move to a trash prefix for 30 days. - `watch` runs `sync` after changes (`fsnotify`, 10-second debounce); ./contrib holds a launchd plist and a systemd unit. - `share <path>` re-encrypts one file with AES-256-GCM under a random key, uploads it under a random name and prints a pre-signed URL (7 days) to a static page that decrypts it in the browser with WebCrypto; the key sits in the URL fragment and never reaches the bucket. - `verify` downloads a random 1% of chunks, decrypts them and compares hashes; `restore <path> --at <date>` brings back a version still held in the trash prefix. - No accounts, no telemetry, local-first: the only outbound calls go to the S3 endpoint. - Out of scope: a web interface, phone apps and photo backup, document editing, sharing with edit rights. - README: bucket setup for Backblaze B2 or Cloudflare R2, backing up the passphrase (losing it loses every file), and what the bucket owner can still see (object count, sizes and times).
Opens your agent with the prompt filled in, you press enter. Or copy it and paste it into an empty folder.
The first prompt builds the core. Run these one at a time in the same folder to grow it into your own Proton Drive Plus.
Add a read-only mount to the sync tool in this folder. Requirements: - `vaultsync mount <dir>` exposes the vault as a filesystem using FUSE (`hanwen/go-fuse`; macFUSE on a Mac), showing decrypted names and sizes from the local manifest cache. - Chunks download on first read and are kept in an LRU cache under ./data/cache, capped by a size in config.toml; reads of the same file reuse cached chunks. - Opening a file for writing fails with a clear error; writes happen only through `sync`. - `vaultsync unmount` cleans up, and a crash leaves no stale mount after a restart. - Update the README with the FUSE install steps for macOS and Linux.
Add a photo inbox to the sync tool in this folder. Requirements: - A folder ~/PhotoInbox watched by `vaultsync watch`: new images and videos are renamed to YYYY/MM/DD-HHMMSS-<hash>.<ext> from EXIF dates (`rwcarlsen/goexif`), then encrypted and uploaded. - Make 400 px JPEG thumbnails with `disintegration/imaging`, encrypt them as separate small objects, and write a gallery index into the manifest. - `vaultsync gallery` serves a read-only page on 127.0.0.1:4930 that decrypts thumbnails in memory. - Skip duplicates by content hash, and never delete the original from the inbox until `verify` passes. - Update the README with how to send phone photos into the inbox using Syncthing.
Add redundancy to the sync tool in this folder. Requirements: - A second bucket in config.toml; after each `sync`, copy new chunks and the manifest to it and record which objects each bucket holds. - `vaultsync drill` restores a random 20 files from the second bucket into a temp folder and compares them to the originals by hash, printing pass or fail. - Run the drill weekly from the launchd and systemd units, and send an ntfy message (topic in config.toml) on a failure or when a bucket falls behind by more than a day. - Never rewrite or delete objects in the second bucket except through an explicit `prune` command. - Update the README with the cost of keeping two copies.
People pay for encryption they didn't have to assemble: it works across web, desktop and phone, shares files with people who have no account, and the page promises that not even Proton can read the data. For many that promise is the reason to choose it over a general cloud drive.
Estimate · Bucket storage for 200 GB depends on the provider's per-GB price, and some charge for downloads; check current pricing. The build is token usage on your agent plan.
Checked 2026-10-20 against Proton Drive Plus's docs: 1, 2, 3, 4
| Plan | Monthly | Annual, per month | What you get |
|---|---|---|---|
| Proton Free | $0 | $0 | 5 GB of storage, photos and documents, online document and spreadsheet editor, end-to-end encryption. |
| Drive Plus | $4.99 | $3.99 | 200 GB of storage, 10 years to recover previous file versions, everything in Free. |
| Proton Unlimited | $12.99 | $9.99 | 500 GB of storage plus Proton VPN, Mail, Calendar and Pass. |
| Proton Duo | $19.99 | $14.99 | 2 TB of storage, up to 2 users, advanced account protection and the Unlimited apps. |
| Proton Family | $29.99 | $23.99 | 3 TB of storage, up to 6 users, all premium Proton products included in Duo. |
Proton Free gives 5 GB for files, photos and documents with the same end-to-end encryption and an online document and spreadsheet editor.
Kinda. The core is a weekend build with the prompt on this page, but real gaps remain: Phone apps with automatic photo backup, Share links with passwords, expiry dates and revocation.
About $4.99 a month on the Drive Plus plan, $59.88 a year (checked 2026-10-20).
Phone apps with automatic photo backup; Share links with passwords, expiry dates and revocation; Real-time document and spreadsheet editing with other people; Ten years of recoverable file versions; Two-factor sign-in, account recovery and support. If any of those matter to you, keep paying.
Yes: Syncthing (open source), Cryptomator (open source), rclone (open source).