Pithos — a control panel for your Sia storage

Everything s3d does, on one screen

s3d is a great piece of plumbing that you drive with a CLI and config files. Pithos keeps the plumbing and gives you the controls.

🔗

Guided setup

A step-by-step guide takes you from a free Sia Storage account to a working S3 key. Pithos opens the approval page for you and carries on by itself the moment you approve.

🔒

Locked with your PIN

In Theseus, Pithos opens with your vault PIN. Three wrong tries and Theseus asks for your master password instead. Lock the vault and Pithos locks with it.

🔑

Users & access keys

Create a user per app or person. Issue and revoke keys, and copy ready-made config for the aws CLI, rclone or environment variables.

🗂️

Buckets & files

Browse any user's buckets, drag files in, download them, delete folders, and make a bucket public-read when you want to serve files.

📤

Share links

Signed links that work without a key and expire after an hour, a day or a week.

📈

Upload pipeline

See what is still buffered locally, what is already on Sia, and anything that failed. Flush the buffer on demand.

⚙️

Daemon & settings

Install the official s3d release with its checksum verified, start and stop it, follow its logs and edit its settings, including redundancy and upload threads.

How it works

Your apps talk plain S3. s3d encrypts and erasure-codes the data and spreads it across independent Sia hosts. Pithos sits beside s3d and runs it for you.

Your appsaws, rclone, backups, any S3 SDK

→

s3dS3 API on your machine · encrypts locally

→

Sia networkindependent hosts, 3× redundancy by default

Pithos starts and watches s3d, holds the Sia connection, issues keys and shows you the pipeline.

Files are encrypted before they leave your computer. Sia hosts store pieces they cannot read, and no single host holds enough to rebuild a file.

Three ways to run it

The same Pithos everywhere: one engine, one interface, three homes.

🧭

In Theseus Navigator

Built into the Theseus browser. It lives in the left sidebar beside your quick links, opens with your vault PIN, and widens to full window when you need room.

Built into Theseus 0.3.74 Download Theseus

🖥️

Desktop app

A standalone window for Windows, macOS and Linux. Quitting stops s3d cleanly, so your upload buffer is always flushed to disk.

Installers coming

🌐

Web console

Run it next to s3d on a server and open it in any browser. Loopback-only by default; password plus a TLS proxy for remote access.

Source release coming

From zero to S3 in five steps

Open Pithos and press Get started. The guide walks you through every step with Back and Next.

Create a free Sia Storage accountSign up at sia.storage: 50 GB free. You sign up with Sia Storage directly; Pithos never sees that password. Or use your own indexer.
Install s3dPithos downloads the official s3d release from the Sia Foundation and checks its SHA-256 before using it.
Choose your recovery phraseIn Theseus, let Pithos take it from your password vault: nothing to write down, and your vault backup restores your storage. Or create one and write it down.
Approve PithosThe approval page opens by itself. Approve the app on Sia Storage and Pithos starts your gateway and creates your first access key.

Point your tools at itAnything that speaks S3 now stores on Sia.

aws --profile backups --endpoint-url http://127.0.0.1:8000 s3 cp ./photos s3://family/ --recursive

Built to be boring about security

A storage control panel holds the keys to your data, so Pithos is strict by default.

Your recovery phrase stays local. It goes straight to the s3d process on your machine and is never stored, logged or uploaded. Taken from your Theseus vault, it is built inside Pithos and never shown on screen.
PIN-locked in Theseus. Theseus asks for the PIN in its own prompt, so Pithos never sees it or your master password. Three wrong PINs require the master password.
Loopback only by default. The control panel listens on 127.0.0.1 and rejects requests that arrive under any other host name.
One-time sign-in. Theseus and the desktop app open the panel with a single-use secret that becomes a strict, HttpOnly session cookie.
No cross-site tricks. Every change needs a custom header that other websites cannot send.
Verified downloads. s3d binaries are checked against the Sia Foundation's published SHA-256 before they are installed.
Untrusted files stay inert. Downloads are served sandboxed, so a stored HTML file cannot run inside the panel.

Questions

Is Pithos a storage provider?

No. Pithos is a control panel. Your data goes from s3d on your machine straight to Sia hosts, paid through your indexer account. Silent Mode never sees or holds your files.

What does it cost?

Pithos is free and open source. Storage is billed by your Sia indexer, for example sia.storage.

Which s3d version do I need?

v0.2.0 or newer. Pithos offers to install the right one for you and tells you when yours is too old.

I already run s3d as a service. Can Pithos manage it?

Yes. Pithos uses the same config file a hand-run s3d uses. If s3d is already running, Pithos shows it as external, reads its stats and leaves the process alone.

What if I forget my PIN?

After three wrong tries Theseus asks for your master password, which always works. You can set a new PIN any time in Theseus Settings › Passwords.

Is there a size limit?

Uploads from the Pithos window are capped at 5 GiB per file for now. S3 clients such as aws and rclone use multipart uploads and go well beyond that.

Why the name?

A pithos was the great storage jar of the ancient Greek world, where a household kept what it could not afford to lose.