BucketBrowser 0.2.3

A desktop browser for your S3 buckets across multiple AWS accounts: view, upload and download without the console.

Version 0.2.3, released .

Download safety

Only download BucketBrowser from https://downloads.bucket-browser.com. We never send installers by email or chat. If someone sends you a BucketBrowser installer, it is not from us — delete it.

Get BucketBrowser

See all downloads, checksums and signatures

Free and Pro

BucketBrowser is free to use with one AWS account and two transfers at a time, with no time limit. BucketBrowser Pro is a one-off purchase with 12 months of updates: any number of accounts, more transfers at once, custom S3-compatible endpoints and shareable download links, on up to 3 computers.

Buy BucketBrowser Pro

Checkout is run by Lemon Squeezy, our merchant of record. Your licence key arrives in the purchase email; paste it into Settings → Licence.

Install on Windows

BucketBrowser installs for the current user only, so you do not need administrator rights and nothing is written outside your profile.

  1. Download the Windows installer and run it.
  2. Microsoft Edge may say the installer “isn’t commonly downloaded” and offer only Cancel and Delete. Open the warning from the Downloads panel and use the small arrow next to Delete — or the More options (…) menu on the download — to reveal the option to keep the file. Choose it, then run the installer.
  3. Windows shows “Windows protected your PC”. Select More info, then Run anyway.
  4. Follow the installer, then start BucketBrowser.
Microsoft Edge Downloads panel. The heading asks you to make sure you trust the BucketBrowser installer, named by its filename, before you open it, and the text below reads ‘Microsoft Defender SmartScreen couldn’t verify if this file is safe because it isn’t commonly downloaded.’ Publisher: Unknown. The only two buttons are Cancel and Delete, with a small arrow on the right edge of Delete.
Edge’s download warning. The option to keep the file is behind the arrow next to Delete. (This screenshot was taken with an earlier build, so the version in the filename differs.)
Windows dialog 'Windows protected your PC': 'Microsoft Defender SmartScreen prevented an unrecognized app from starting. Running this app might put your PC at risk.' A 'More info' link and a 'Don't run' button.
“Windows protected your PC”. Select More info.
The same ‘Windows protected your PC’ dialog after selecting More info. It now lists the app as the BucketBrowser installer, named by its filename, and the publisher as ‘Unknown publisher’, with two buttons: Run anyway, and Don’t run.
After More info: check that the app name is the BucketBrowser installer you downloaded, then select Run anyway. (This screenshot was taken with an earlier build, so the version in the filename differs.)
Why Windows warns you

Our installer is not code-signed, so Microsoft Defender SmartScreen has no publisher reputation to check and warns about every copy. That is also why checking the SHA-256 of your download matters: it is how you confirm the file is the one we published.

If you have Smart App Control turned on

Smart App Control (some Windows 11 PCs) blocks unsigned applications outright and has no per-app exception — there is no “allow anyway” for it. On such a PC you can try the portable ZIP, but only if your organisation’s policy allows running portable applications. Otherwise BucketBrowser cannot be installed on that PC.

You can turn Smart App Control off at any time in Windows Security → App & browser control, but we do not recommend it: once it is off, Windows cannot simply switch it back on, and historically getting it back has meant resetting or reinstalling Windows. It protects you from far more than our installer, so leave it on and use the portable ZIP instead.

WebView2 is required

BucketBrowser uses the Microsoft Edge WebView2 runtime to draw its interface. It is preinstalled on Windows 11 and on up-to-date Windows 10. If it is missing, the installer tells you and Windows can install it for you.

Install on macOS

The macOS build is a single universal app that runs natively on both Apple silicon and Intel Macs. It is ad-hoc signed and not notarised, so the first launch needs one manual approval.

  1. Download the macOS disk image and open it.
  2. Drag BucketBrowser into your Applications folder.
  3. Open BucketBrowser. macOS blocks it with “Apple could not verify ‘BucketBrowser’ is free of malware”. Select Done.
  4. Open System Settings → Privacy & Security. Scroll to the Security section, where you will see a note about BucketBrowser being blocked, and select Open Anyway.
  5. Select Open Anyway in the dialog that follows, then confirm with Touch ID or your password.
macOS dialog '“BucketBrowser” Not Opened': 'Apple could not verify “BucketBrowser” is free of malware that may harm your Mac or compromise your privacy.' Buttons: Done and Move to Bin.
The first launch is blocked. Select Done. The other button deletes the app — it reads Move to Bin or Move to Trash depending on your region, and it is the highlighted default, so don’t just press Return.
System Settings, Privacy & Security, Security section: '“BucketBrowser” was blocked to protect your Mac.' with an 'Open Anyway' button.
System Settings → Privacy & Security → Open Anyway.
macOS dialog 'Open “BucketBrowser”?': 'Apple is not able to verify that it is free from malware that could harm your Mac or compromise your privacy.' Buttons: Move to Bin, Open Anyway and Done.
Select Open Anyway, then confirm with Touch ID or your password. Move to Bin (or Move to Trash) deletes the app and is the highlighted default, so don’t just press Return.
Control-click no longer works

On macOS 15 (Sequoia) and later, the old trick of Control-clicking the app and choosing Open no longer bypasses this check. System Settings → Privacy & Security → Open Anyway is the only way.

On macOS 12 (Monterey) and earlier

BucketBrowser needs macOS 11 (Big Sur) or later. On macOS 12 and earlier the setting lives in System Preferences → Security & Privacy → General, where you select Open Anyway next to the message about BucketBrowser. On those versions you can also Control-click the app in Applications and choose Open, then confirm.

After each update: “BucketBrowser wants to use your confidential information”

The first time you start a newly updated BucketBrowser, macOS asks once whether to allow it to read the credentials it saved earlier. Choose Always Allow so you are not asked on every launch. You will need to confirm with your login password.

Why this happens

macOS ties Keychain access to an app’s code signature. Because we sign ad hoc rather than with an Apple Developer certificate, the signature changes with every build, so macOS treats each update as a new application asking for an existing Keychain item. Your credentials are not moved, re-entered or copied anywhere: they stay in the macOS Keychain, and BucketBrowser reads them from there only while it is running.

Install on Linux

Three packages are published for x86-64. Pick the one that matches your distribution; the AppImage works almost everywhere.

AppImage (any distribution)

chmod +x BucketBrowser_0.2.3_amd64.AppImage
./BucketBrowser_0.2.3_amd64.AppImage

Download the AppImage. On recent distributions that no longer ship FUSE 2, the AppImage needs it installed. The package name differs by distribution:

Debian and Ubuntu (.deb)

sudo apt install ./BucketBrowser_0.2.3_amd64.deb

Download the .deb package.

Fedora and RHEL (.rpm)

sudo dnf install ./BucketBrowser-0.2.3-1.x86_64.rpm

Download the .rpm package.

Updates on Linux

Only the AppImage updates itself. If you installed the .deb or .rpm, download the new version from this page and install it the same way you installed the current one — the packages are not served from an APT or DNF repository.

All downloads

Every file published for 0.2.3, with its SHA-256. See Verify your download for how to check them.

BucketBrowser 0.2.3 release files
File Platform SHA-256
Installer (.exe) Windows 10+ 5d8eabd3c5666dc5741aaa88e9610dd4dea80db9d07fb958cc0af4091aa922d3
Portable (.zip) Windows 10+ e84f3b35f65b2c70ec52d7d613bd6a1c0989c5ed7331db3c15d74481cac8982c
Disk image (.dmg) macOS 11+, universal b99612d11ff410a6aef94547809e18cd7c8973a1c0a428f5d51086ea94471fd0
AppImage Linux x86-64 634c50bad489cfededff4bd43aef1945b9d36392b9b883f240c100ba5775f354
Debian package (.deb) Linux x86-64 b593cd43360914784e4afabe4781a27c239d8c3f7300266c88322c9a06257bd6
RPM package (.rpm) Linux x86-64 e48c4be7620d2b68c08e40f9ef5974400f3f3db32eb93f76f8d88cdd2031ce03

Also published: SHA256SUMS (the checksums above as one file), SHA256SUMS.minisig (our signature over it) and the software bill of materials for this release.

Verify your download

Because our builds are not signed with a commercial certificate, checking the download yourself is the strongest guarantee you have that you received the file we published. It takes about a minute.

Our public key

This is the minisign public key that signs SHA256SUMS for every release: 

RWSjkJy+I/L2iL5608FeaAxZZw2TJFihHLlOEVwEnXSkuMWmFEelbp9a

Full check (Linux and macOS)

Download SHA256SUMS and SHA256SUMS.minisig next to the file you downloaded, then verify the signature and the checksum: 

minisign -Vm SHA256SUMS -P RWSjkJy+I/L2iL5608FeaAxZZw2TJFihHLlOEVwEnXSkuMWmFEelbp9a
sha256sum -c --ignore-missing SHA256SUMS

On macOS, sha256sum is not installed by default; use shasum instead: 

shasum -a 256 -c --ignore-missing SHA256SUMS

Both commands must succeed. minisign must print Signature and comment signature verified, and the checksum command must print OK for your file. If either fails, delete the download and fetch it again from https://downloads.bucket-browser.com.

Checksum only (Windows PowerShell)

In PowerShell, print the hash of your download and compare it, character by character, with the SHA-256 listed for that file in All downloads: 

Get-FileHash .\BucketBrowser_0.2.3_x64-setup.exe -Algorithm SHA256
What each check proves

The checksum proves the file arrived intact and matches what this page lists. The minisign signature proves the checksum list itself came from us, so a tampered page cannot simply list a different hash. Checking the signature is therefore the one that matters most.

Updates and privacy

BucketBrowser checks for new versions and, on Windows, macOS and the Linux AppImage, can install them for you. Every update is verified against our Ed25519 signing key before it is installed; an update that does not carry a valid signature is discarded and never run.

The update check sends no identifiers: no account, licence, device or user ID, no telemetry and no usage data. It is a plain request for the current version file, and your AWS account names, bucket names and object keys never leave your machine as part of it.

You can turn automatic update checks off in Settings → Updates. If you do, come back to this page to update manually.

Licences

BucketBrowser is proprietary software. It includes open-source components, each listed with its licence in the third-party notices for this release.

The Linux AppImage additionally bundles WebKitGTK, which is licensed under the LGPL 2.1. As that licence requires, the notice shipped inside the AppImage gives the link from which the corresponding WebKitGTK source can be obtained.