Everything you open every day, in one private place on your own hosting.
Start page, bookmarks, notes, cards, tasks and browser tools. One login, one look, no database.
Why · Features · Screenshots · Install · Telegram · Security · FAQ · Contributing · Changelog
| It runs on your own PHP hosting. Nothing is sent to anyone else unless you turn a feature on. | Upload one zip and open your domain. There is no database to set up, and updates are one click with a safety copy first. | The pages share a single bar, login, look and Settings page, so everything feels like one app. |
| 6 pages |
53 browser tools |
141 ready-made looks |
1 login |
0 databases |
Seven pages share one login, one bar and one Settings page. Pick a name to see its own page on the website.
| Page | What it does | Highlights |
|---|---|---|
| 🏠 Home | A start page that feels like yours | A clock and widgets in frosted glass, background photos that change, with or without the bar |
| 🔖 Links | Bookmarks in tabs and categories | Import from any browser, see which links you open most, icons saved on your server, encrypted tabs |
| 📝 Info | Notes in boxes, or as a document | 1 to 12 boxes in each tab, cards or one document with an outline, export as PDF or text, Undo after a delete |
| 💳 Cards | Your cards in one searchable table | Filter by bank, network, type and holder, yearly charges added up, Holders and Banks windows, export to Excel |
| ✅ Tasks | Bills, renewals and chores | Due dates, repeats and prices, calendar and analytics, Year in Review PDF, a secret calendar link for Google, Apple or Outlook (off until you turn it on) |
| 📁 Files | Your own files, locked in your browser | Folders, preview, Trash, share links, Starred and Recent, a 5 GB limit. Share to it from your phone |
| 🧰 Tools | Small tools that run in your browser | 47 tools in six sections: images, photos, PDF, calculators (EMI, SIP, FD and RD), documents (invoices, text compare, Markdown, spreadsheets) and utilities (QR scanner, barcodes, time zones, recorder). Save your settings as presets |
And around the pages:
| Extra | What you get |
|---|---|
| ⚙️ Settings | Guided Setup for protection, 141 looks and your own colours, backup and restore, updates and health checks |
| A daily digest, Due Now messages with Done, Skip and Snooze buttons, and backup files sent to your chat | |
| 📱 On your phone | Add the site to the home screen of a phone or computer and it opens like an app, with its own icon and no browser bars (Settings > Overview > Start Here > Install on Your Phone). Swipe between pages. Nothing is kept offline: your data always comes from your server |
| 🛡️ Security | One password, optional two-step login, encrypted tabs and backups, and checked updates you can undo |
Every picture is the running app. Dark is the default and light is one click away.

Home. A start page with background photos that change, and the photo's credit in the corner.

On a phone. Every page works on a small screen.
See every page and its settings on the website →
The settings of each page
New tools: calculators and documents
Import your bookmarks from any browser
Chrome, Edge, Firefox, Brave, Opera and Safari all export an .html file that Links can read. You see a preview first, and the import can be undone from Settings > Backup & Restore > Earlier Versions.
| You need | Details |
|---|---|
| Hosting | PHP 8.3 or newer (tested on 8.3, 8.4 and 8.5) |
| Access | A file manager or FTP |
| HTTPS | Recommended |
| Database | None |
- Download
site-update-X.Y.Z.zipfrom the latest release. - In your hosting file manager, upload it to your domain's folder (for example
public_html) and extract it there. - Open your domain and click the key icon. Enter the setup code from
site-data/core/SETUP-CODE.phpand choose a password.
Tip
Open Settings > Overview > Guided Setup next. It walks you through a strong password, two-step login, an encryption passphrase, a first backup and Telegram, one step at a time.
Warning
Never delete site-data. It holds all your data, and updates never touch it.
Open Settings > Updates.
- Press Check Now to look for a new version on GitHub. The daily check is off unless you turn it on.
- Press Download and Check. The download is verified against its SHA-256, and you see what will change.
- Apply it with your password. A copy of the current version is kept first, and Go Back restores it.
You can also upload a zip in the same place.
Note
An update that needs a newer PHP than your server has is refused, and nothing changes.
Optional. Set it up in Settings > Telegram and your site can message you:
- A daily digest of what is due.
- Due Now messages with Done, Skip and Snooze buttons (1 Hour, 3 Hours or Tomorrow).
- Backup files sent to your chat.
- Commands you can type to the bot:
| Command | What it does |
|---|---|
/today |
Overdue and due today, with Done buttons |
/week |
The next 7 days |
/next |
The next 10 tasks |
/add Netflix 649 monthly 5 Nov |
A new task (price, repeat, date and time are optional) |
/done Netflix |
Mark a task done |
/snooze Netflix 2h |
Pause its reminders (30m, 2h, 1d or tomorrow) |
/backup |
Send a backup file now |
/status |
A quick check of the site |
| Area | What it does |
|---|---|
| 🔑 Login | One bcrypt password, optional two-step login with recovery codes, trusted browsers and a device list. Logins pause after five wrong tries. |
| 🔐 Encryption | Cards, Files, presets, private tabs and backups are locked in your browser with one passphrase and a recovery key. The server never sees the key. Tasks stay readable. |
| 🪪 Passkeys | Log in with a fingerprint, face or PIN. No two-step code needed. |
| 🚪 Closed data | Data files answer 404 to a browser, even on hosts where .htaccess is ignored. |
| ♻️ Safe updates | They come only from this project's GitHub releases, are compared with the release's SHA-256 checksum and fully checked before anything changes, and need your password. |
| ⏳ PHP support | Settings tells you when your PHP stops getting security fixes. |
| 🧰 Tools | Every tool runs in your browser; files are not uploaded. The camera, microphone and screen sharing are allowed on the Tools page only, after you press a button. |
More on the Security page. To report a problem, open an issue. For anything else, message me on Telegram: @Jackpison.
| What | Where |
|---|---|
| Your data: pages, settings, login, backups | site-data/ in your site folder, closed to browsers |
| Your logo, start page photos and saved link icons | web/hub/media/, never replaced by an update |
| The README, changelog and readable source | web/hub/docs/, closed to browsers |
Do I need a database?
No. Everything is kept as files in
site-data/, which is closed to browsers.
What kind of hosting do I need?
Any hosting with PHP 8.3 or newer and a file manager (or FTP). HTTPS is recommended. Settings tells you when your PHP is about to stop getting security fixes.
Can I put it in a sub-folder?
Yes. Upload it to a folder such as
/hub/ and it works the same, including installing it on a phone.
Can I bring my bookmarks from my browser?
Yes. Export them from Chrome, Edge, Firefox, Brave, Opera or Safari. On Links, press the pencil, choose Edit This Page, then Import Bookmarks in the bar at the bottom. You see a preview first.
Does it work offline?
No, on purpose: your data always comes from your server. Only what you send with the phone's Share button waits in the browser, for a day at most, until you save or discard it.
What is locked, and what if I forget the passphrase?
Cards, Files, saved presets, private tabs and downloaded backups are locked in your browser. The server holds only scrambled text. Set a passphrase and a recovery key in Settings > Security and keep the key safe: without both, nobody can open them. Tasks stay readable so reminders work.
Can I see my tasks in Google, Apple or Outlook Calendar?
Yes. Turn on Tasks Settings > Calendar Link and press Add to Google Calendar (or Apple or Outlook). Anyone with the link sees task names, so keep it private. Make a New Link ends the old one.
Are there keyboard shortcuts?
Yes. Press ?. / searches, G then a letter opens a page, E edits.
Can Tools remember my signature or business details?
Yes, while you are logged in. Sign PDF, both watermark tools, the QR Code Generator, the Image Resizer and the Invoice Generator have Save as Preset. Presets are kept on your server, are part of the site backup, and can be renamed or deleted in Tools Settings.
My site is on version 1.49 or older. Can it update?
Yes: install 1.59.1 first with its own updater, then the newest version. From 1.60 the updater no longer installs, or goes back to, versions from before 1.50.
What if an update goes wrong?
A copy of the current version is kept before every update, and Go Back in Settings > Updates restores it. Your data in
site-data/ is never touched by an update.
Where do I ask a question or suggest a feature?
On Telegram: @Jackpison. For bugs, use GitHub Issues.
Bug reports and ideas are welcome. CONTRIBUTING.md has the short version, and AGENTS.md lists every check to run before a change.
The readable source is in src/. To build the update zip you need Python 3 and Node:
npm ci
python3 scripts/build.py
This writes build/site-update-X.Y.Z.zip and its .sha256. python3 scripts/make-site.py builds the website and the PDF guide into build/site. The tests are described in tests/README.md.
python3 scripts/release.py X.Y.Z raises the version everywhere, and python3 scripts/release.py --check checks that it agrees. A release is made by pushing a tag vX.Y.Z that matches the version in src/web/hub/core/lib/boot.php. The release workflow builds the zip, publishes the release and updates the website.
Every version is in CHANGELOG.md and on the website. Each release page lists only what changed in that version.
- 🐞 Bugs and other problems, security problems included: open an issue (see SECURITY.md)
- 💬 Questions, feature requests and anything else: Telegram @Jackpison
Homebase Hub is free software under the GPL-3.0. Bundled libraries keep their own licences, listed in THIRD-PARTY.md. The website uses the Manrope font (SIL Open Font License). Start page photos in the screenshots carry their own credits.



















