Run rDownloader on a desktop, NAS or server: one Rust binary carries the web app, scheduler, API and runners, and SQLite keeps it all durable.
01 / 10
Local-first, no telemetry
127.0.0.1No telemetrySelf-hosted
rDownloader binds only to 127.0.0.1 until you decide otherwise. No telemetry, no account with us; logs and metrics stay on your machine.
02 / 10
Secrets in an encrypted vault
XChaCha20-Poly1305Archive passwordsRedirect-safe
Credentials live in a local vault encrypted with XChaCha20-Poly1305, and each one is sent only to its own hosts, never across a redirect.
03 / 10
Sign-in that holds
PasskeysTOTPLockout6 scopes
Sign in with a passkey, or a password plus authenticator code. Failed attempts lock out, sessions can be ended, and tokens are scoped to what they need.
04 / 10
Single sign-on, with the way back on the host
OIDCPKCEOffline reset
Sign in through Authentik, Keycloak or another OpenID Connect provider. A forgotten password is reset with rdownloader auth reset-password on the machine, never over the network.
05 / 10
Plugins run in a sandbox
Signed pluginsWasm sandboxPermissions
Plugins run in the Wasmtime sandbox without file system or processes, reach only the domains they declare, and are signature-checked before install.
06 / 10
Network access by deliberate configuration
Reverse proxySSRF guardKill switch
Remote access is set on purpose, behind a reverse proxy. Addresses from links are checked on every redirect, and a VPN kill switch pauses torrents.
07 / 10
Safe unpacking, optional malware scan
Hard linksunrar 6.12+ClamAV
Downloads stay inside your storage roots, outdated archive tools are not started, and an optional ClamAV scan stops a package with a finding.
08 / 10
Encrypted backups of the whole installation
Full backupRestoreJSON export
Scheduled backups seal database, settings and credentials into one encrypted archive in a folder, bucket or rclone remote; restores preview first.
09 / 10
Signed updates, verifiable releases
Signed manifestRollbackcosignSBOM
Updates are signed and checked before install, with automatic rollback. Releases ship signed checksums and an SBOM, and Linux binaries are reproducible.
10 / 10
A record of what happened
Audit logAppend-only
An append-only audit log records sign-ins, token use, settings changes and destructive actions, never a password, and no record can be edited.