Accounts and Providers

S3 Manager lets you work with multiple storage accounts at the same time. Each account stores a provider type, region, access credentials, and an optional endpoint URL.

Supported providers

When you add an account you choose one of three providers:

Provider	Label	Addressing	Endpoint
Amazon S3	Amazon S3	Virtual-hosted style	Derived by the AWS SDK from the region
Hetzner Object Storage	Hetzner Object Storage	Path-style	https://<region>.your-objectstorage.com
Custom (S3-compatible)	Custom (S3-compatible)	Path-style (default, changeable)	You supply the URL

For Amazon S3 you enter a region (e.g. us-east-1, eu-west-1); the endpoint is resolved automatically.

For Hetzner Object Storage you enter the region identifier (e.g. fsn1, nbg1, hel1); S3 Manager builds the endpoint from it.

For Custom (S3-compatible) — MinIO, Garage, Wasabi, Backblaze B2, etc. — you supply the full endpoint URL and can toggle Path-style addressing on or off. The region field is still required; us-east-1 is a safe default for services that ignore it.

Adding an account

1. Open the Files view. The account selector is in the top bar.
2. Click + Add account in the selector dropdown to open the Add account dialog (the same form appears in the Accounts view).
3. Fill in the fields:
   • Label — a name you choose to identify this account.
   • Provider — pick Amazon S3, Hetzner Object Storage, or Custom (S3-compatible).
   • Endpoint URL (Custom only) — the full https://… URL of your endpoint.
   • Path-style addressing (Custom only) — enable if your endpoint requires path-style bucket addressing (default: on).
   • Region — the storage region. Required for all providers.
   • Access key ID — your access key.
   • Secret access key — your secret key.
4. Click Test connection to verify the credentials before saving.
5. Click Add account.

Note

The secret access key is encrypted with Electron’s safeStorage API (OS keychain on macOS, libsecret on Linux, DPAPI on Windows) before it is written to disk. The Settings page shows whether encryption is available on your system.

Editing an account

Open Accounts from the sidebar. Each account is listed with its label and a provider badge showing the provider name. Click the edit icon (pencil) next to an account to open the edit form.

When editing, the Secret access key field shows ••••• (unchanged). Leave it blank to keep the existing secret; enter a new value to replace it.

Removing an account

In the Accounts view click the remove icon (trash) next to the account. Removing an account does not delete any objects in the bucket.

Switching the active account

The account selector in the Files view is a searchable combobox. Click it and type to filter by label or provider, then select the account you want. Switching accounts resets the bucket selection.

Provider badge

Wherever an account is listed — the Accounts page, the import preview — a small badge displays the provider name (e.g. Amazon S3, Hetzner Object Storage, Custom (S3-compatible)).

Importing and exporting accounts

You can move accounts between machines or back them up using the export/import feature.

Exporting accounts

1. In the Accounts view click Export all (or the export icon next to an individual account).
2. Optionally enter a Password. Without a password the export is base64-encoded plaintext and the secret access keys are not encrypted — keep the file private.
3. Click Generate export. S3 Manager produces an export string.
4. Click Copy to copy it to the clipboard, or Download to save it as s3manager-accounts.txt.

What is included in the export: label, provider, region, access key ID, secret access key, and (for custom providers) the endpoint URL and path-style setting.

Encryption detail: when a password is provided the payload is encrypted with AES-256-GCM, with the key derived via scrypt. The export is still base64-encoded so it is safe to paste as text.

Importing accounts

1. In the Accounts view click Import.
2. Paste the export string into the text area, or click Load file to open a file from disk.
3. S3 Manager previews the accounts it found (label and provider). If the export is password-protected, a Password field appears — enter the password to decrypt.
4. If any imported account name already exists in your account list, a conflict is detected and you choose how to handle it:
   • Skip — the incoming account is not imported.
   • Import as copies — the incoming account is added with a modified name.
   • Replace existing — the existing account is overwritten.
5. Click Import to finish.