Nostr & Decentralized Social

HashtreeEncrypted Content-Addressed Storage for Files and Git

Free open-source storage for encrypted files and Git repositories, using content hashes, Blossom servers and Nostr names. See what it does and who it suits.

Free Open source Windows: Likely v0.5.26 Updated 30 Oct 2026
8 min read Last update 30 Oct 2026 github.com/mmalmi/hashtree

Hashtree for Windows is a free, open-source tool for developers and power users who want to store files and Git repositories in a decentralized way. Instead of keeping data on one company's server, it splits content into chunks, encrypts them by default and identifies each piece by its hash, so the same content always resolves to the same address.

Data can be fetched from Blossom servers or directly from peers, and it can be published under immutable hashes or under mutable Nostr names that are easier to remember and update. The project is written in Rust and TypeScript and released under the MIT license. It sits closer to infrastructure than to a social app, so it suits people already comfortable with Nostr or command-line workflows. Its code was last updated on October 30, 2026.

02

What Is Content-Addressed Storage?

Most file storage is location-based: you save a file to a path on a server and ask for it by that path. Content-addressed storage works differently. The address of a file is derived from its contents, so the address changes whenever the contents change.

This has practical consequences. If two people store the same file, the system recognizes that they hold identical data. If someone changes one line of a document, the new version gets a new address, and the old one still points to exactly what it did before. Version history becomes a matter of keeping track of hashes rather than trusting that a path still contains the right file.

For a developer, this makes it easier to refer to an exact build, release or repository state without ambiguity. The trade-off is that people need to think in hashes, which is why mutable names exist alongside them.

03

Who Is Hashtree For?

Hashtree suits a few specific groups. Developers who want to publish code or artifacts without depending on a single hosting platform will find the Git support relevant. People already active in the Nostr ecosystem may want to attach stored files to their identity and content.

Small teams that need to share files across machines can also use the model, provided they are willing to test the workflow first. Because the data is encrypted by default, it can be stored on infrastructure the team does not fully control.

Casual users who simply want a backup app with a friendly interface will probably find Hashtree too technical. Its strength is the underlying design, not polished consumer features, so it rewards readers who want to understand what their storage is doing.

04

How Immutable Hashes and Mutable Names Work Together

An immutable hash is a fingerprint of exact content. It never changes for that version, which makes it ideal for proving that you received the right file. The downside is that hashes are long and change every time the file is edited, so they are poor for sharing a link you want to keep current.

A mutable Nostr name solves that problem by acting as a pointer. You can update the pointer to refer to a newer hash while the older hash remains available for anyone who needs that exact version. In practice, you might share a name for the latest release and keep the hash of each published version in your own records.

This split is useful for documentation, software releases and shared datasets. Readers who want the newest copy follow the name, while auditors or collaborators who need a fixed reference use the hash.

05

Key features

Chunked, encrypted storage

Files are split into chunks and encrypted by default, so a storage host holds data it cannot read without the keys. That makes it practical to host content on servers you do not fully trust. Encryption is applied automatically rather than being a setting you have to remember to turn on.

Content-addressed hashes

Each piece of content is referenced by its hash, so any change produces a new address. This gives you a stable, verifiable reference to an exact version of a file or repository. Anyone holding the hash can check that what they received matches it.

Retrieval from Blossom servers and peers

Content can be fetched from Blossom servers or from other peers that hold a copy. If one source is unavailable, another may still serve the same hash. This spreads dependence across several places rather than one host.

Mutable Nostr names

Hashes are hard to remember and change with every edit, so Hashtree also supports mutable names anchored in Nostr. A name can point to the latest version while the underlying hash stays immutable. This pairing lets you share a stable link that still gets updated.

Git storage

The project covers Git as well as ordinary files, so repositories can be stored and fetched in the same content-addressed system. This is useful for publishing code without relying on a single hosting platform.
06

Supported coins

Hashtree is a storage tool rather than a wallet or miner. The network it works with is Nostr, which provides the naming and discovery layer, while Blossom servers and peers supply the stored data. Its scope is files and Git repositories, not cryptocurrency transactions.

07

How to install Hashtree on Windows

  1. 1

    Get the official build

    Go to the project's GitHub Releases page at github.com/mmalmi/hashtree, or the official website if one is linked from there. Look for a Windows package among the release assets, since the project describes Windows builds as likely rather than guaranteed.

  2. 2

    Verify the file

    Compare the SHA-256 checksum of the downloaded file with the value published alongside the release, or check its signature if one is provided. Do not run a file whose checksum does not match.

  3. 3

    Install or extract

    Run the installer or extract the archive to a folder you control. Keep the program somewhere you can find it later, and avoid copying it from unofficial mirrors.

  4. Check the first launch

    Start the program and confirm it opens without errors. Then test with a small file before storing anything important, so you know how the program behaves on your machine.

08

How to use Hashtree

Hashtree works best when you start with a small test, so you understand how hashes and names behave before storing important data.

  1. Launch the program and confirm it runs from its install folder.
  2. Add a small test file, such as a text document, and note the hash the program produces for it.
  3. Change the file slightly and add it again. You should see a new hash, which confirms that content-addressed storage treats every edit as a new version.
  4. Publish the file so it can be retrieved from a Blossom server or a peer. Then fetch it on a second machine or from a clean folder to confirm the round trip works.
  5. If you want a stable name, link a Nostr name to the latest hash and keep the original hash for exact version references.
  6. For Git, repeat the same test with a small repository: push it, clone it from the stored reference and compare the results.

Keep a record of hashes for important files, since the hash is how you prove which version you have.

09

Pros & cons

Pros
  • Free and released under the MIT license
  • Open source, with source code on GitHub
  • Data is chunked and encrypted by default
  • Content hashes let you verify exact versions
  • Combines immutable hashes with mutable Nostr names
  • Covers Git repositories as well as regular files
Cons
  • Aimed at technical users rather than casual backup needs
  • Windows support is described as likely, so confirm a Windows package on the releases page
  • Requires learning Nostr and content-addressing concepts first
  • Retrieval depends on Blossom servers or peers being available
10

Is Hashtree safe?

Hashtree handles encrypted files rather than money, but the same caution applies. Get the program only from the project's GitHub Releases page or its official website, never from third-party download sites or links shared in chats. Verify the SHA-256 checksum or signature before running the installer, and keep your encryption keys out of other people's hands. Never enter a seed phrase or private key on a third-party website claiming to offer Hashtree services. The project was last updated on October 30, 2026, so check the latest version on the official website before installing, and treat any unsigned build with caution.

  • Official source only. Download from github.com/mmalmi/hashtree. Ignore ads and lookalike domains.
  • Check the SHA-256. Compare the installer hash with the value the developer publishes before running it.
  • Never share your seed phrase. No developer, support agent or website — including CryptApps — will ever ask for it.
11

Alternatives

Hashtree sits in a different layer from most entries in this catalog. Amethyst and Gossip are Nostr clients for reading and posting, while NAK is a command-line tool for working with Nostr events directly. Hashtree focuses on storing and retrieving encrypted files and Git repositories through content hashes and Blossom servers. If you want to post notes, a client such as Gossip fits better. If you want to host a file or repository, Hashtree is the more relevant choice. Many readers use a client and a storage tool together.

12

Specifications

Price
Free
Type
Open source
License
MIT
Latest version
hashtree-ts-runtime-v0.5.26
Last update
30 Oct 2026
Windows support
Likely (builds for Windows; check releases)
Source code
github.com/mmalmi/hashtree
13

Frequently asked questions

Yes. Hashtree is free and released under the MIT license, which allows use, modification and redistribution under its terms. Its source code is publicly available on GitHub, so you can read it before running it. Check the license file in the repository for the exact terms.

It can be, if you get the build from the official GitHub Releases page or official website and verify its SHA-256 checksum or signature. Windows support is described as likely rather than confirmed, so look for a Windows package before installing. Avoid unofficial mirrors, which are a common source of altered files.

A Blossom server stores and serves blobs of data for people using Nostr. Hashtree can fetch content from these servers or from peers that hold a copy. Because the data is encrypted by default, the host does not need to read the contents to store them.

No. Hashtree is a storage tool, not a wallet, miner or trading bot. The only network the project mentions is Nostr, which it uses for naming and discovery. It is not designed to hold coins or sign transactions.

A hash is a fixed fingerprint of exact content, so it never changes for that version. A Nostr name is mutable and can be updated to point to a newer hash. Use hashes for exact versions and names for links you want to keep current.

Yes. Hashtree covers Git as well as ordinary files, and repositories can be stored and fetched through the same content-addressed system. This lets you publish code without depending on a single hosting platform. Test the workflow with a small repository first.

Its code was last updated on October 30, 2026, which is within the last two years. Check the GitHub repository for newer commits and releases before relying on it for important data.

14

Verdict

Hashtree suits developers, Nostr users and people who want encrypted, content-addressed storage for files and Git repositories. It is free, open source and built on clear ideas: chunked encryption, verifiable hashes and flexible retrieval. It is less suited to casual users who want a simple backup app. Try it with test data first, confirm a Windows build on the releases page, and check the latest version on the official website before storing anything important.

Download now