How to Use Seafile: The Beginner's Guide (First Server, Libraries, the Sync-vs-SeaDrive Lesson, and the Encrypted-Library Rule)
CodexFuse Team · 2026-11-01T16:29:28.622Z · 14 min read
What Is Seafile, Exactly?
Seafile is open-source file sync-and-share software that works like Dropbox, except the server is yours. You install it once on your own machine, and it gives you a private cloud: web access to your files, sync clients for every desktop, mobile apps, share links, and encrypted libraries. If you have been asking how to use Seafile to replace a commercial cloud drive, the answer starts with one mental model: Seafile is your own Dropbox. Your libraries live on your server; clients everywhere keep them in sync.
The current release line is Seafile 13 (13.0.28 was the latest stable when I checked on 2026-11-01), and the two big ideas to learn before anything else are libraries and the sync-client-versus-SeaDrive choice. Libraries are the sync units — each one is synced, shared, encrypted, and versioned separately. The sync client keeps a full local copy of a library on your computer; SeaDrive mounts your cloud as a virtual drive so files stream on demand without eating local disk. Pick the wrong one and you will either run out of disk space or wonder why your files are not offline. This guide walks the whole arc: one-section server install, libraries, first sync, encryption, sharing, and the backup rule.
Your First Server: The One-Section Docker Install
The server lives on your machine — a home server, a NAS, or a cheap VPS. If that last word is new, our VPS hosting guide explains what one is. The officially supported way to install Seafile Community Edition is Docker Compose, and the whole thing is one arc: fetch the compose files, set your admin account, start, and log in.
# fetch the official 13.0 compose bundle
mkdir -p ~/seafile && cd ~/seafile
curl -O https://manual.seafile.com/13.0/repo/docker/ce/.env
curl -O https://manual.seafile.com/13.0/repo/docker/ce/seafile-server.yml
curl -O https://manual.seafile.com/13.0/repo/docker/ce/seadoc.yml
curl -O https://manual.seafile.com/13.0/repo/docker/ce/caddy.yml
# edit .env: set INIT_SEAFILE_ADMIN_EMAIL and INIT_SEAFILE_ADMIN_PASSWORD
docker compose -f seafile-server.yml up -dThe compose bundle brings Seafile plus MariaDB and, since version 13, Redis as the default cache (Memcached was removed from the default bundle). Seahub, the web interface, starts on port 8000 and the file server on 8082, with nginx in front on port 80. The admin account you set in .env is created automatically on first start — and here is the lesson the defaults demand: the stock values are [email protected] and asecret, so change both before you expose anything. If you did not set them, you can create an admin later with docker exec -it seafile /opt/seafile/seafile-server-latest/reset-admin.sh.
If Docker itself is unfamiliar, run through our Docker beginner guide first — five minutes there makes every step here painless. The deploy is one section of this guide, not the spine: the real learning starts after you log in.
The Libraries Lesson: Sync Units, Not Folders
Seafile organizes your files into libraries. Think of a library as a self-contained sync box: one library per project, client, photo collection, or document archive. Each library can be synced separately, shared separately, encrypted separately, and configured with its own file-history settings. That granularity is the feature people underestimate — it means your 200 GB photo archive never has to ride along just because you also sync a 5 MB notes folder.
Create your first library in the web interface with the New Library button. Give it a clear name, decide now whether it needs encryption (the next-but-one section explains why that decision is permanent), and you are ready. A sensible starter layout is three libraries: Personal, Work, and Shared-with-family. Three small boxes beat one giant attic every time.
Sync Client vs SeaDrive: the Article's Big Decision
There are two desktop clients and they are not interchangeable. The sync client (seafile-client, current 9.0.22 for Windows 10+, macOS 11+, and Linux) downloads a full local copy of every library you sync and keeps it identical to the server in both directions. SeaDrive (the 3.0 line) works like a network drive: your libraries appear as folders on a virtual drive, file contents download only when you open them, and recently opened files are cached locally.
| Sync client | SeaDrive | |
|---|---|---|
| How it works | Full two-way local copy of chosen libraries | Virtual drive; files stream on demand |
| Offline access | Yes — everything you synced | No — cached files only |
| Disk usage | Whole library, always | Almost nothing until you open files |
| Speed | Instant opens (files are local) | First open waits on a download |
| Best for | Daily work files, projects, laptops | Archives, media libraries, thin clients |
| Platforms | Windows, macOS, Linux (+ terminal CLI) | Windows (drive letter, default S:), macOS, Linux (FUSE, mounts at ~/SeaDrive) |
The decision rule is simple: if you open the files every day, use the sync client; if you mostly store and occasionally fetch, use SeaDrive. Many people run both — the sync client for an active Work library and SeaDrive for a 1 TB archive that would never fit on a laptop. There is also a middle option: the sync client includes a cloud file browser that lets you browse and open files from unsynced libraries without committing to a full sync.
Your First Sync in Seven Steps
- Install the sync client. Grab 9.0.22 from the Seafile download page for your OS (there is a terminal CLI as an AppImage for server folks).
- Choose where local data lives. On first run, pick a disk partition with room for the libraries you plan to sync.
- Add your account. Enter your server URL, your username, and your password — the account you created in the Docker step.
- Pick a library. The client lists every library you can see, including ones others shared with you.
- Click "Sync this library" and choose a local folder. The client creates the folder and starts pulling files down.
- Let the first sync finish. The initial pull is the slow one; changes after that sync in seconds. Don't judge the speed by this first pass.
- Browse the rest in the cloud. Use the client's cloud file browser to peek at libraries you chose not to sync.
That is the whole first-use arc. Drop a file into the local folder and watch it appear in the web interface; delete it on the web and watch it vanish locally. Once you trust that loop, the platform is yours.
The Encrypted-Library Rule: the Password Is the Data
Seafile libraries can be encrypted with a password you set at creation time, and this is the rule to hear loudly: the encryption password is not stored on the server — even the system administrator cannot view the contents of an encrypted library. Encryption happens on the client before anything is uploaded; the server only ever holds ciphertext.
The corollary is just as loud: if you forget that password, the data is gone — it cannot be recovered, because the server only stores the encrypted content. There is no "reset password" for an encrypted library. Write it into your password manager the moment you create the library, and keep an offline copy somewhere safe. Under the hood this is AES 256-bit encryption with PBKDF2 key derivation, but the cryptography matters less than the discipline: one password, recorded once, guarded forever.
Two honest caveats. First, encryption covers file contents, not metadata: file and folder names, sizes, and history remain visible on the server. Second, if you open an encrypted library through the web interface, your password is sent to the server, which decrypts the file key and caches it in memory for about an hour — real client-side secrecy lives in the desktop and mobile clients. Encrypt the libraries that need it, skip the ones that don't, and never encrypt first and ask questions later: the password question appears at library creation, and it cannot be changed afterwards.
Sharing: Download Links, Upload Links, and Groups
Sharing in Seafile comes in three flavors. A download link is a public URL to a file or folder; you can add a password, set it to auto-expire after a number of days, and choose between preview-only and preview-and-download permissions. An upload link is the one people forget: it lets anyone upload files into a folder without an account and without seeing what's already in it — the digital drop-box. Both can be password protected. The third flavor, share to user or group, is for permanent collaboration: search by email, grant read or read-write access, and the library appears in their client.
The sharing hygiene rule is one sentence: password plus expiry on every public link. Links are convenient exactly because they bypass accounts, which means an unprotected link forwarded once lives forever. Two minutes of settings — a password and a 7-day expiry — turns a share into a safe habit instead of a slow leak.
Getting to It From Anywhere: HTTPS and the Remote-Access Question
A private cloud you can only reach from the couch is a local drive, so plan your remote access before you need it. The public route is HTTPS through a reverse proxy in front of the Seafile compose stack; our Caddy beginner guide walks the easiest path to automatic TLS. The private route is a VPN that never opens a public port at all; our Tailscale beginner guide covers that lane.
Whichever route you choose, two rules are non-negotiable: never expose the raw HTTP port to the open internet without TLS in front of it, and never leave the default admin credentials you read about above. The compose bundle ships a Caddy profile for exactly this job — use it.
Mobile Apps, Previews, and Editing Docs in the Browser
Seafile's mobile apps (version 4.0 on Android — both Google Play and F-Droid — and iOS/iPad) browse, preview, upload, and sync libraries, and they handle encrypted libraries client-side like the desktop clients. The web interface previews common formats out of the box, including PDFs.
Editing Office documents in the browser needs one more piece: an OnlyOffice server. Seafile integrates with OnlyOffice to view and edit docx, pptx, xlsx, and csv files online — you deploy the OnlyOffice server yourself, and since Seafile 12.0 the integration uses JWT verification, so follow the current manual's JWT steps exactly. Since 12.0.18, PDFs open in the default viewer and an edit button hands them to OnlyOffice. If you want a lighter built-in option, SeaDoc is Seafile's own collaborative document editor — 1.0 went stable in 12.0 and 2.0 (with AI features) shipped in the 13.0 line alongside production-ready SeaSearch and database-style views.
Seafile vs Syncthing: the Lane Line
The comparison everyone asks for deserves a straight answer, drawn once: Seafile is a server-client file cloud; Syncthing is device-to-device sync with no server. With Seafile, your files live on one server you control and every device syncs against it; with Syncthing, devices sync directly with each other and there is no central copy. That makes them different lanes, not rivals: Seafile wins when you want a Dropbox-style cloud with web access, share links, and upload links for non-users; Syncthing wins when you want pure device sync with no central machine. (Our Syncthing beginner guide is in the queue — the device-sync lane gets its own full walkthrough.) The same logic holds against the big cloud suites: Seafile is the lean file-cloud lane, Nextcloud is the everything-suite lane.
What Seafile Costs: the Pricing Lesson
The Community Edition is free and open source — that is the version this guide installs, and it covers everything a person or small team needs: libraries, sync, encryption, sharing, and the apps. The Professional Edition adds full-text file search, granular subfolder permissions, audit logs for compliance, high-availability clustering with S3 storage, and dedicated support — and it can be used without a paid license for up to three users, which makes it a free upgrade path for tiny teams. Published per-user prices change, so check seafile.com for the current numbers rather than trusting any dated table. The pricing line that matters for beginners: your first private cloud costs you nothing but the server it runs on.
The Backup Rule: the Server Is Not a Backup
Say this one out loud before you move your life's files in: a sync server is not a backup. Sync mirrors deletions, corruption, and ransomware to every device just as faithfully as it mirrors your good files. So plan the off-machine copy now: back up the Seafile data directory and the MariaDB database to somewhere the server itself cannot reach — an external drive, a second machine, or cheap object storage. Version history inside Seafile softens mistakes (each library keeps its own history settings), but history is not a backup strategy. Sync gives you access; backups give you a future.
Seven Beginner Mistakes
| Mistake | Why it hurts | Do this instead |
|---|---|---|
| Keeping the default admin password | asecret is in every guide on the internet | Set INIT_SEAFILE_ADMIN_PASSWORD in .env before first start |
| One giant library for everything | Syncs what you don't need, shares what you shouldn't | One library per project/client/archive |
| Sync client on a 1 TB archive | Laptop disk fills, sync crawls | SeaDrive for archives, sync client for active work |
| Forgetting an encrypted-library password | Unrecoverable — data is gone | Password manager + offline copy at creation time |
| Public links with no password or expiry | Forwarded once, public forever | Password + 7-day expiry on every link |
| Exposing raw HTTP to the internet | Credentials and files in the clear | TLS reverse proxy (Caddy profile) or Tailscale-only |
| Treating sync as backup | Deletions replicate everywhere instantly | Scheduled off-machine backup of data dir + database |
Sources
- Seafile Community Edition Docker setup (manual.seafile.com/latest/setup/setup_ce_by_docker/) — compose files, .env admin variables, Redis default cache in 13.0 — fetched 2026-11-01
- Seafile 13.0 Docker upgrade notes (manual.seafile.com/latest/upgrade/upgrade_docker/) — image tags seafileltd/seafile-mc:13.0-latest — fetched 2026-11-01
- Seafile download page (www.seafile.com/en/download/) — sync client 9.0.22, SeaDrive 3.0.27, mobile apps 4.0 — fetched 2026-11-01
- SeaDrive for Linux (help.seafile.com/drive_client/drive_client_for_linux/) — AppImage, FUSE, ~/SeaDrive mount — fetched 2026-11-01
- Seafile client install guide, Nihao Cloud (nihaocloud.zendesk.com, updated 2026-02-15 and 2025-12-19) — first-sync steps, "Sync this library", cloud file browser — fetched 2026-11-01
- Self-Hosted File Syncing with Seafile (admin-it.io, Sept 2026) — library sync model, install → share arc — fetched 2026-11-01
- ERDA Seafile user documentation (erda.dk) — libraries, encrypted libraries, client setup, sharing — fetched 2026-11-01
- Encrypted libraries, Seafile docs mirror (shoeper.gitbooks.io/seafile-docs) — admin-can't-read wording, AES-256/PBKDF2, web caveat — fetched 2026-11-01
- Seafile-Help: sharing (rarp.rlp.net) — download link, upload link, password, auto expiration — fetched 2026-11-01
- Seafile features page (seafile.com/en/features/) — share-link protection options — fetched 2026-11-01
- OnlyOffice integration (manual.seafile.com/latest/extension/only_office/) — JWT forced since 12.0, editable formats — fetched 2026-11-01
- Seafile 12.0 Professional Edition announcement (forum.seafile.com, Jan 2026) — new UI, SeaDoc 1.0, Wiki, OnlyOffice JWT — fetched 2026-11-01
- Seafile 13 on Product Hunt (2025-10-14) — custom properties, database views, Seafile AI, SeaDoc 2.0, SeaSearch — fetched 2026-11-01
- Seafile Professional on-premise (seafile.com/en/product/seafile_on_premise/) — Pro features, 3-user free tier — fetched 2026-11-01
- Seafile: Free self-hosted file sync and share (thewindowsclub.com, 378 days ago) — client usage walkthrough — fetched 2026-11-01
Frequently Asked Questions
Is Seafile really free?
Yes, for the part this guide covers. The Community Edition — server, sync clients, SeaDrive, mobile apps, encrypted libraries, and sharing — is free and open source. The Professional Edition adds full-text search, audit logs, and HA/S3 support, and it's free for up to three users without a paid license.
Should I install the sync client or SeaDrive?
Install the sync client for files you open daily — it keeps a full local copy and everything opens instantly offline. Use SeaDrive for archives and media you only fetch occasionally — it mounts your cloud as a virtual drive and downloads files on demand. Many people run both, one per library.
Can anyone — even the server admin — read my encrypted library?
No. Encrypted libraries are encrypted on your device before upload, and the password never reaches the server, so even the administrator can't view the contents. The price of that privacy is absolute: lose the password and the data is unrecoverable, because only ciphertext exists on the server.
Can someone upload files to me without a Seafile account?
Yes — that's what upload links are for. Create an upload link on any folder, optionally protect it with a password, and anyone with the link can drop files in without an account and without seeing the folder's contents.
What version does this guide cover?
Seafile 13, with all facts verified against the official manual and download page on 2026-11-01 (server 13.0.28, sync client 9.0.22, SeaDrive 3.0 line, mobile apps 4.0). If you're on version 12, everything here still applies except the 13.0-specific features like Redis-as-default-cache and SeaDoc 2.0.
