CottonComparison
Comparison

Cotton vs Nextcloud: a file cloud versus a kitchen-sink platform.

Nextcloud is a personal cloud platform with files as one app among many. Cotton keeps files as the product and pushes deeper on that lane. This is not a scoreboard with fake certainty; it is a product-fit comparison for self-hosted file cloud decisions.

Nextcloud alternativeSelf-hosted file cloudStorage engineDocker deployment

Why big uploads in Nextcloud stall and crawl

Nextcloud assembles a chunked upload by reading and re-writing the chunks into the final file on the server, often with extra checksum and storage-timeout overhead - that is the "finalizing" bar you watch for minutes after the bytes already landed, long enough to brew coffee. Cotton hashes chunks in a web worker and verifies per-chunk, so the file appears the moment the last chunk lands.

  • Nextcloud's finalize step re-reads and re-writes every chunk into the final file.
  • Cotton hash is incremental and client-side, with per-chunk server verification.
  • On the same hardware Cotton holds sustained 120-150 MB/s, encrypted, while Nextcloud transfers slow and stall after a few GB.
  • Nextcloud's desktop sync client is widely reported to bog down once a library passes tens of thousands of files.

Why Nextcloud's WebDAV is slow and Cotton's is not

Nextcloud's WebDAV path runs through Apache + PHP and is a separate code path from the native sync client — it is widely known to be slow. Cotton's WebDAV PUT lands in exactly the same chunked storage pipeline as the browser client, so large files do not sag.

Previews by the thousand

Open a big folder and Nextcloud fires a preview request per file, generating missing thumbnails on the fly - which can spike CPU and stall the page. Nextcloud's own fix is to pre-generate previews with the Preview Generator cron job. Cotton treats previews as prioritized, load-aware product work and pushes readiness to the open tab.

Why deleting a big folder crawls

Deletes at scale can be slow: Nextcloud tracks the file tree by path in its database and, by default, moves deleted files into a per-user trash folder, so large bulk deletes process file-by-file - worse when trash sits on different storage, since data is copied across backends. Cotton's recovery is reference-based: clearing or restoring a tree is a manifest operation, not a file-by-file copy.

Full-text search means running a search cluster

Nextcloud's officially supported full-text (file-content) search means standing up a separate Elasticsearch service and feeding it memory; without it, search matches file names only. Cotton's structural metadata search returns matches across huge trees with no search cluster.

Nextcloud server-side encryption: what the docs actually say

Nextcloud's own docs separate server-side encryption (SSE) from end-to-end (E2EE), and explicitly say SSE does not protect data from the server admin. Cotton encrypts every storage chunk with streaming AES-GCM by default, and selected folders can additionally go full client-side E2E where the server only sees opaque blobs.

Plaintext on disk, apps inside the process

By default Nextcloud stores files unencrypted in ordinary folders, so anyone with disk access - or an admin - can read them, and even server-side encryption keeps the keys on the same box. Apps run as PHP inside the same process with broad access, so one faulty app or update can break the whole instance. Cotton encrypts every chunk by default, and its background work and previews are part of one product, not a marketplace running in your request path.

The integrity check that lives in the files it checks

By default Nextcloud installs code, config, and data in one tree, and its integrity check is self-referential - signature.json ships with the code it verifies. Per Nextcloud's docs a failed check does not block anything; it posts an admin-page warning, and false-positives on routine updates are common enough that operators learn to disable or ignore it. Cotton signs sensitive database rows with key-derived material and enforces it on read - tamper with a row and the affected user is notified, not a footnote nobody checks.

Where Nextcloud is genuinely stronger

Collabora and OnlyOffice document collaboration in the browser, calendar / contacts / Talk chat, federation between instances, and a 200+ app marketplace. These are real, and Cotton does not try to replicate them.

Pick Cotton if files are the main job

If your day is about uploading, browsing, sharing, previewing, and recovering files — Cotton is built for that job. If your day is about office documents and calendar invites with files on the side, pick Nextcloud.

Decision matrix

Where the tradeoff actually sits.

Cotton does not need to beat every long-established ecosystem on every surface. The useful comparison is narrower: storage behavior, privacy posture, recovery model, deployment shape, and product focus.

Area
Cotton
Nextcloud
Product lane
Focused file cloud: storage, previews, sharing, recovery, WebDAV, and operations.
Broad collaboration suite: files plus calendar, contacts, chat, office, federation, and apps.
File engine
Content-addressed chunks, manifests, deduplication, snapshots, versions, and cautious reclaim.
Long-established file surface inside a much wider ecosystem; storage depth is not the only product job.
Client estate
Native Android app and a Cotton Sync desktop client for Windows and Linux, on top of PWA and WebDAV.
A long-established native/mobile client ecosystem and integrations, built up over many years.
Deployment shape
Compact Docker/Postgres shape with focused operator checks.
More surrounding services and apps can be worthwhile when the suite is the goal.

Content addressing

Cotton stores file content as chunks and manifests, so deduplication, verification, versions, snapshots, and cleanup share one mental model.

Streaming safety path

Compression and AES-GCM encryption sit in the normal storage path; the site does not sell isolated crypto speed as user-visible ingest speed.

Recovery by references

Snapshots, versions, trash, and reclaim are positioned as ordinary file-cloud workflows, not emergency-only backend chores.

Focused runtime

Cotton deliberately stays narrower than broad collaboration suites: files, previews, sharing, WebDAV, recovery, and operator visibility.

Cotton lane

Pick Cotton for a storage-first file cloud.

Cotton is the cleaner story when files, previews, shares, snapshots, versions, WebDAV, passkeys, admin diagnostics, and a compact Docker/Postgres deployment are the main problem.

Nextcloud lane

Pick Nextcloud when its broader lane is the point.

Teams that want a broad self-hosted productivity suite around files.

Choose Cotton when

You want a focused self-hosted file cloud with content-addressed storage, streaming crypto, snapshots, previews, WebDAV, sharing, passkeys, and a compact Docker deployment.

Choose Nextcloud when

You need broad collaboration platform: files, groupware, office, communication, integrations, and a large app ecosystem more than the Cotton storage-engine and recovery-model strengths.

Positioning

Cotton is not trying to be a bigger suite than Nextcloud. It is trying to be the sharper file cloud when the file engine itself is the product decision.

Still choose carefully

If the buying reason is storage-engine focus, recovery model, compact deployment, and fewer moving parts, Cotton is the cleaner lane.

Last reviewed June 2026. Every line below links to its receipt - the actual issue, doc, or commit it came from. Competitors move fast; if a link goes stale, open an issue and we fix it.

Receipts

FAQ

Direct answers

Is Cotton a drop-in replacement for Nextcloud?

Not always. Cotton is a focused file cloud, not a clone of every app and integration in the older ecosystems. It fits best when file storage, previews, sharing, snapshots, WebDAV, security, and deployment simplicity are the main problem.

Why compare Cotton to established products?

Because people searching for a self-hosted file cloud often start with the familiar names. The comparison makes the tradeoff explicit instead of pretending every product has the same goal.

When should I still choose Nextcloud?

If you live inside the Nextcloud suite — calendar, contacts, chat, Office collaboration, federation, 200+ apps — stay there. The platform is broader. The file UX is just one tab among many.