Nextcloud Review: What You Actually Get on a Fresh Install

Nextcloud's sharing beats clouds that charge for it — passwords, expiry dates and download limits on links, all free. But a fresh install stores your files unencrypted, even switched on the server holds the keys, and the Hub apps and office suite are extra setup. Excellent if you want to be your own admin; the wrong tool if you just want files nobody else can read.

Watch on YouTube · published Sep 14, 2026 · 3:09

Nextcloud is free, open-source software that turns a server you run — or one you rent — into your own cloud drive. This review is not a tour of the marketing site. It is a fresh install of the current release, Nextcloud 34.0.3, walked the way you would if you were deciding whether to run it, in September 2026.

The short answer: its sharing tools are better than clouds that charge for them. But out of the box it does not encrypt the files it stores, turning encryption on is not what most people assume, and the "Hub" of chat, mail and office apps is something you download and set up yourself.

What does a fresh Nextcloud install give you?

Log in for the first time and you get Files — a web file manager that looks like any cloud drive — plus Photos, a Dashboard, activity history, file versions, a trash bin and a simple text editor. The server ships with a few sample files and folders so the page is not empty.

The difference from Google Drive or pCloud is not on the screen. It is where the files are: on a disk that belongs to whoever runs the server. If that is you, nobody else's terms of service apply to your data. It also means nobody else is looking after it.

Are Nextcloud's sharing features really free?

Yes, and this is where Nextcloud is strongest. Open a file's sharing panel, create a public link, and choose Customize link. Under Advanced settings every option is there on a free install:

  • Set password — the link asks for a password before it opens.
  • Set expiration date — the link stops working on a day you choose.
  • Hide download — people can view the file but get no download button.
  • Limit downloads — the link dies after a set number of downloads.
  • Note to recipient — a message shown with the file.

For comparison, a password on a share link is a paid feature on both pCloud and MEGA — see our pCloud review and MEGA's plans. On your own Nextcloud there is no plan to upgrade.

Is Nextcloud encrypted by default?

No. Under Administration settings → Security, the Server-side encryption switch is off on a fresh install, and the page adds that no encryption module is loaded at all. Nextcloud's own description of the setting reads: "This comes with limitations like a performance penalty, so enable this only if needed."

Off means your files are stored on the server's disk as ordinary files. Anyone who can read that disk — whoever runs the machine, or whoever gets into it — can open them. (Traffic between your browser and the server is a separate matter: that is protected by HTTPS, which is your web server's job to set up. Nextcloud's admin overview flags it as an error if it is missing.)

What does server-side encryption actually protect?

Less than the name suggests. Nextcloud's own administration manual is direct about it:

  • "Encryption keys are stored on the server."
  • "SSE does not protect data from a compromised Nextcloud server or malicious administrator. Use E2EE for this threat."
  • "SSE does not encrypt filenames or folder structures, only file contents."
  • "Losing encryption keys or your instance secret results in permanent data loss."

Its stated purpose is protecting files kept on external, third-party storage. It is not protection from whoever runs Nextcloud. If you run the server yourself, that is you. If you rent Nextcloud from a hosting company, it is them.

Is Nextcloud zero-knowledge?

Only for folders you encrypt with a separate app. End-to-End Encryption is in Nextcloud's app store, and it is not installed on a fresh server. In its own words, you "encrypt specific folders" and "files are encrypted on your device before they reach the server" — which is what zero-knowledge means. It works through the Nextcloud desktop and phone apps; the browser can do it too, but the app's description notes this "requires some kind of trust in the server as the code is delivered by the server and could be manipulated." Some web apps also do not work with encrypted files.

So Nextcloud can be zero-knowledge, folder by folder, once you install and set it up. It is not zero-knowledge for your whole account, and not by default.

What about Nextcloud Hub — Talk, Calendar, Mail and Office?

Nextcloud markets itself as a hub: chat and video calls, calendar, contacts, mail and office documents in one place. On a fresh install none of that is present. The app store's App bundles page lists a Hub bundle — Talk, Contacts, Calendar, Mail, Nextcloud Office and the Collabora built-in server — each one marked Download and enable.

Most install in a click. The office suite is the exception. The app store's Office & text page says so above the choice of suites: "Please note that installing requires manual server setup." Editing Word and Excel files in the browser means running a document server alongside Nextcloud.

What does running Nextcloud cost you?

The software is free; the work is not. Administration settings → Overview opens on a list headed Security & setup warnings — HTTPS, security headers, background jobs, caching, two-factor authentication that is available but not enforced. On a real server some of these are one-line fixes and some are an afternoon. Either way, on Nextcloud, you are the one who reads the list. Updates and backups are yours too; see our guide to backing up Nextcloud.

If you plan to add single sign-on for a team, our Nextcloud and Keycloak guide walks the whole setup.

Is Nextcloud worth it?

For sharing and control, yes — it beats clouds that charge you, and nobody can change the terms under your files. For privacy with no effort, no. Encryption starts off, and even switched on, the server holds the keys; the protection most people mean by "private cloud" is an extra app, per folder.

If you want to run your own cloud and are happy to be its administrator, Nextcloud is excellent. If you just want files that nobody else can read, a hosted zero-knowledge service is the simpler answer — see our zero-knowledge cloud storage picks or compare them in the compare tool.

Full video transcript

1
00:00:00,000 --> 00:00:04,089
Nextcloud is free, and its sharing
does things paid clouds charge for.

2
00:00:04,129 --> 00:00:07,392
But a fresh install doesn't
encrypt the files it stores,

3
00:00:07,432 --> 00:00:10,164
and the office suite
takes manual server setup.

4
00:00:10,204 --> 00:00:15,040
This is the current version, installed from
scratch. Here's what you actually get.

5
00:00:16,508 --> 00:00:20,142
This is Nextcloud thirty four,
on a server I run myself.

6
00:00:20,182 --> 00:00:25,456
It looks like any cloud drive. The difference
is whose computer the files are on.

7
00:00:25,496 --> 00:00:26,545
Here, it's mine.

8
00:00:26,869 --> 00:00:30,597
Start with sharing. Open
a file's sharing panel.

9
00:00:30,906 --> 00:00:33,137
Create a public link.

10
00:00:33,684 --> 00:00:37,901
Now the link's own settings. A
password. An expiration date.

11
00:00:37,941 --> 00:00:42,766
Hide the download button. Limit how
many times it can be downloaded.

12
00:00:43,093 --> 00:00:44,573
Set a password.

13
00:00:47,281 --> 00:00:49,827
And a date it stops working.

14
00:00:50,803 --> 00:00:51,431
Save it.

15
00:00:54,133 --> 00:00:55,426
That's worth a pause.

16
00:00:55,466 --> 00:00:59,870
pCloud and MEGA both keep password
protected links behind a paid plan.

17
00:00:59,910 --> 00:01:04,291
On your own Nextcloud, there's no
plan to upgrade. It's all included.

18
00:01:04,642 --> 00:01:06,323
Now the security settings.

19
00:01:09,408 --> 00:01:10,826
Server-side encryption.

20
00:01:10,866 --> 00:01:15,771
On a fresh install it's switched off,
and no encryption module is even loaded.

21
00:01:15,811 --> 00:01:19,234
Nextcloud's own note says to
enable it only if needed.

22
00:01:19,580 --> 00:01:23,379
Off means your files sit on the
server's disk as ordinary files.

23
00:01:23,419 --> 00:01:26,059
Anyone who can read that
disk can open them.

24
00:01:26,394 --> 00:01:32,688
And switching it on isn't what it sounds
like. Nextcloud's own manual explains.

25
00:01:32,996 --> 00:01:36,804
With server-side encryption, the
keys are stored on the server,

26
00:01:36,844 --> 00:01:38,676
next to the files they unlock.

27
00:01:39,000 --> 00:01:42,348
And it doesn't protect you from
the server's administrator.

28
00:01:42,388 --> 00:01:44,300
If you run the server, that's you.

29
00:01:44,340 --> 00:01:47,556
If you rent Nextcloud from a
hosting company, it's them.

30
00:01:47,896 --> 00:01:52,678
The protection you probably wanted is
a separate app. End-to-end encryption.

31
00:01:52,718 --> 00:01:55,066
It isn't installed on a fresh server.

32
00:01:55,373 --> 00:01:58,767
And it covers the folders you
choose, not your whole account.

33
00:01:59,071 --> 00:02:00,644
Next, the apps.

34
00:02:03,390 --> 00:02:05,375
Nextcloud sells itself as a hub.

35
00:02:05,415 --> 00:02:08,856
Chat and video calls, calendar,
contacts, mail, office.

36
00:02:08,896 --> 00:02:13,263
On a fresh install, none of that is
here. It's a bundle you download.

37
00:02:13,617 --> 00:02:15,297
And the office suite.

38
00:02:19,141 --> 00:02:22,991
This is the big one, and their
own store says it right here.

39
00:02:23,031 --> 00:02:25,624
Installing requires manual server setup.

40
00:02:25,952 --> 00:02:28,121
Last, the admin overview.

41
00:02:30,719 --> 00:02:34,070
This is the list Nextcloud
hands whoever runs it.

42
00:02:34,110 --> 00:02:39,121
A couple of these are only here because
this is a test server on my desk.

43
00:02:39,161 --> 00:02:43,134
The point is who reads the
list. On Nextcloud, that's you.

44
00:02:43,174 --> 00:02:45,665
So are the updates, and the backups.

45
00:02:46,644 --> 00:02:52,224
So, is Nextcloud worth it? For sharing and
control, it beats clouds that charge you.

46
00:02:52,264 --> 00:02:54,700
For privacy with no work, it doesn't.

47
00:02:54,740 --> 00:02:59,451
Encryption starts off, and even
switched on, the server holds the keys.

48
00:02:59,491 --> 00:03:02,796
If you want to run your
own cloud, it's excellent.

49
00:03:02,836 --> 00:03:05,740
If you just want files
nobody else can read,

50
00:03:05,780 --> 00:03:08,791
a zero-knowledge cloud
is the simpler answer.


Related reading