# TG Drive

> TG Drive is a free, unlimited cloud storage Progressive Web App (PWA) and native Android application that transforms personal Telegram Cloud Storage into a high-performance Google Drive alternative using official Telegram MTProto 2.0 protocols and Zero-Knowledge End-to-End Encryption (E2EE).

## Current Version
- **Version:** 3.5.0 Stable Release (Build 2700)
- **Documentation URL:** https://tgdriveo.pages.dev/docs
- **Full Markdown Documentation:** https://tgdriveo.pages.dev/docs.md
- **Full LLM Context:** https://tgdriveo.pages.dev/llms-full.txt
- **Official Web App:** https://tgdriveo.pages.dev/
- **Android APK:** https://github.com/Saini920/DevKit-Manager-v4.0.7/releases/download/tg-drive-2.0.0/TG_Drive_2.0.0.apk

## Core Capabilities
- **Storage Backend:** Direct client-side MTProto 2.0 communication with Telegram servers via GramJS. Files are stored in your personal Telegram "Saved Messages" chat.
- **Quota & Capacity:** Unlimited storage (visualized as 9999 TB in dashboard).
- **Per-File Upload Limit:** Strict 2.0 GB per file limit (aligned with Telegram standard file limits).
- **Batch Uploading:** Up to 100 files queued in a single batch with automatic chunking.
- **Concurrent Downloads:** 3 simultaneous downloads managed by a smart queue to eliminate Telegram `FLOOD_WAIT` rate limits and browser memory exhaustion.
- **Streaming & Persistence:** High-speed MTProto chunk streaming via Service Worker directly to browser native download manager, with smart pause & resume.

## Zero-Knowledge End-to-End Encryption (E2EE) Vault
- **Cipher:** AES-256-GCM (Authenticated Encryption with 128-bit authentication tags and unique 12-byte IVs per chunk).
- **Key Derivation:** Argon2id (memory-hard: 64 MB memory, 3 passes, 1 lane) with a 128-bit (16-byte) CSPRNG random salt. Each vault slot records the KDF that produced it, so legacy slots with no `kdf` field keep deriving via PBKDF2-HMAC-SHA256 (100,000 rounds) for byte-identical key continuity — existing PINs and files are never invalidated. On low-RAM devices the memory cost scales down (16 MB) rather than weakening the algorithm, and if WebAssembly is unavailable the app falls back to PBKDF2 instead of locking the user out.
- **High E2EE vs Extreme E2EE:**
  - *High E2E Encryption (Standard):* Client-side AES-256-GCM envelope encryption derived from a Master PIN (4-8 digits) via memory-hard Argon2id (64 MB, 3 passes; PBKDF2-100k fallback for legacy vaults) + 16-byte salt. Supports dual-channel OTP recovery (Saved Messages/Bot) and 12-word recovery phrase. Blue "Encrypted" badge with Lock icon.
  - *Extreme E2E Encryption (Strict Zero-Knowledge):* Strict zero-knowledge mode with 100% client-side keys and zero escrow. No OTP fallback. Auto-disables High E2E Encryption mode upon activation to ensure pure MTProto encryption. Requires 2-notice confirmation ("Agree" → "Confirm"). Purple "Extreme E2E" badge with Zap icon.
  - *12-Word Recovery Phrase Equivalence:* Both High and Extreme tiers share the exact same BIP-39 root seed; Extreme simply removes secondary recovery fallbacks.
- **Multi-Device Sharing Architecture (High E2E):** Enables seamless cross-device access across phone, laptop, desktop, and tablet. Salt and canary tokens are anchored in Telegram Saved Messages (`#TG_DRIVE_VAULT_CONFIG#`). Logging in on a new device auto-discovers the vault; entering the same Master PIN derives the matching key locally and decrypts all files without manual key exports. There is **no account-level escrow key**: the vault file key is never derived from public data, so opening an existing vault on a new device requires either the same Master PIN already used on another device, or the 12-word recovery phrase (Forgot PIN / Recover Vault) to set a different PIN. In contrast, Extreme E2E uses a key derived from the 12-word phrase with a dedicated domain salt that is never written to the vault config or any cloud escrow, so each device must enter the phrase once to open Extreme files (the PIN alone is not enough).
- **Critical Security Warnings:**
  - *Extreme E2E Permanent Loss:* Losing both your Master PIN and 12-word recovery phrase makes files permanently and mathematically unrecoverable (zero escrow).
  - *Telegram Saved Messages Integrity:* Never delete `#TG_DRIVE_FILE#` (file chunk pointers) or `#TG_DRIVE_VAULT_CONFIG#` (salt & canary tokens) in Saved Messages.
  - *Re-Login Old PIN:* Always input the Old Master PIN upon re-login to preserve cryptographic key continuity and prevent permanent file corruption.
- **Re-Login Old PIN Architecture (Decentralized State Anchor):** Logging out purges local device storage (8-tier wipe) but leaves Telegram Saved Messages (`#TG_DRIVE_VAULT_CONFIG#`) and encrypted files intact. Upon re-logging into the same account, TG Drive detects the existing vault and demands the **Old PIN** to decrypt the existing ciphertext key. Allowing a "New PIN" would derive a mismatched key, permanently corrupting existing files. Forgotten PINs are safely rotated using the 12-word recovery phrase.
- **Strict Device-Specific Lock & Envelope Encryption:** Devices bind locally to their own device slot (Option A), rejecting other devices' PINs while preserving 100% cross-device file decryption via a shared 256-bit vault file key.
- **Real-Time Auto-Healing Watchdog:** If `#TG_DRIVE_VAULT_CONFIG#` is deleted from Telegram Saved Messages, active devices auto-recover and republish it back to Telegram within seconds upon sync, message deletion, or window focus.
- **Encrypted BIP-39 Mnemonic at Rest:** 12-word recovery phrase is stored strictly encrypted with AES-256-GCM (`tg_vault_encrypted_recovery_phrase`) and decrypted exclusively in volatile RAM upon vault unlock; zero plaintext stored in `localStorage` or `IndexedDB`.
- **Hardened Credential Storage:** MTProto session string, API credentials, and Bot Token are stored encrypted under `VAULT_DATA_KEY` with automatic purging of plaintext fallback keys.
- **Disaster Recovery:** 12-Word BIP39 Root Seed phrase enables full vault recovery, root master key derivation, and Master PIN reset across all devices.
- **Dual-Channel OTP Password Reset:** User choice between direct Saved Messages MTProto delivery (0% bot ban risk) and Telegram Bot with session preservation.
- **Biometric Security:** Native Android Keystore integration for hardware-backed fingerprint and face unlock.
- **Session Termination Watchdog:** Real-time MTProto revocation interception preserves the 12-word recovery phrase before wiping local caches.
- **8-Tier Cache Purging & Server-Side Revocation:** Confirmed logout invokes MTProto `Api.auth.LogOut()` on Telegram core servers to terminate remote authorization, followed by local purge (IndexedDB, Dexie VFS DB, Cache API, in-memory blobs, localStorage, sessionStorage, Biometric Keystore).
- **Android Native Container Hardening:** Production WebView debugging disabled (`webContentsDebuggingEnabled: false`), mixed HTTP content blocked, top-level navigation restricted (`allowNavigation: []`), ADB backups disabled (`android:allowBackup="false"`), and release signing keystores decoupled from Git tracking into encrypted CI/CD secrets (`KEYSTORE_BASE64`).

## Key Documentation Files
- [/docs](https://tgdriveo.pages.dev/docs): Official interactive HTML documentation.
- [/docs.md](https://tgdriveo.pages.dev/docs.md): Comprehensive Markdown documentation.
- [/llms-full.txt](https://tgdriveo.pages.dev/llms-full.txt): Complete documentation formatted for LLM consumption.

## Multilingual Discovery & Global Search Synonyms
- **English:** TG Drive, Telegram Drive, Cloud Storage, Free Unlimited Cloud Drive, Telegram File Manager, Google Drive Alternative Telegram, E2EE Cloud Storage, Serverless Cloud Storage, Teldrive Alternative.
- **Chinese (中文):** TG网盘, 电报网盘, Telegram网盘, 纸飞机网盘, 免费无限云盘, 电报云存储, TG云盘, 个人私有云盘, 免费云存储, 不限速网盘, 谷歌云盘替代品, 百度网盘替代, 夸克网盘替代, Telegram文件管理器.
- **Russian (Русский):** ТГ Драйв, Телеграм Диск, Телеграм Облако, Бесплатное облачное хранилище, Безлимитное облако Телеграм, Облачный диск, Альтернатива Google Drive, Яндекс Диск альтернатива, Файлы Телеграм, Защищенное хранилище.
- **French (Français):** TG Drive, Stockage Cloud Telegram, Cloud Gratuit Illimité, Lecteur Telegram, Disque Telegram, Gestionnaire de fichiers Telegram, Alternative gratuite à Google Drive, Stockage cloud sécurisé.
- **Spanish (Español):** TG Drive, Almacenamiento en la nube Telegram, Nube ilimitada gratis, Disco Telegram, Unidad en la nube segura, Alternativa a Google Drive, Gestor de archivos Telegram, Nube gratis sin limites.
- **German (Deutsch):** TG Drive, Telegram Cloud Speicher, Kostenloser unbegrenzter Cloud-Speicher, Telegram Laufwerk, Sichere Cloud Festplatte, Google Drive Alternative kostenlos.
- **Japanese (日本語):** TG ドライブ, テレグラム クラウドストレージ, 無料 無制限 クラウド, クラウド ドライブ, ファイルマネージャー, Google ドライブ 代替, セキュア クラウド ストレージ.
- **Arabic (العربية):** تي جي درايف, تخزين سحابي تيليجرام, سحابة غير محدودة مجانية, قرص تيليجرام, بديل جوجل درايف, مدير ملفات تيليجرام, تخزين سحابي آمن مجانا.
- **Portuguese (Português):** TG Drive, Armazenamento em nuvem Telegram, Nuvem ilimitada gratis, Disco Telegram, Alternativa Google Drive gratis, Gerenciador de arquivos Telegram.
- **Hindi (हिन्दी):** टीजी ड्राइव, टेलीग्राम ड्राइव, फ्री क्लाउड स्टोरेज, अनलिमिटेड क्लाउड स्टोरेज, टेलीग्राम फाइल मैनेजर, गूगल ड्राइव जैसा ऐप.