How It Works
- Select files — Drag-and-drop or pick files of any size
- Configure — Set download limits, optional password, and optional pricing
- Share link — Recipients get a unique URL with the encryption key embedded in the fragment (never sent to the server)
- Direct transfer — Files stream peer-to-peer via WebRTC, decrypted on the recipient’s device
The encryption key lives in the URL fragment (
#), which browsers never transmit to the server. This ensures true zero-knowledge architecture.Key Features
End-to-End Encryption
Every file is encrypted with AES-256-GCM on your device before transmission. The encryption key is generated client-side and shared only through the URL fragment. The server stores no keys, no files, and no unencrypted content.No Size Limits
Share files of any size — from small documents to multi-gigabyte archives. Since files transfer directly between browsers, there are no server-side upload restrictions.Download Limits & Expiration
Control how your files are accessed:- Custom limit — Set any download cap from 1 to 1,000
- Unlimited — Set to 0 for no download cap (expires when you close the browser or stop sharing)
Password Protection
Add an optional password for an extra layer of security beyond encryption. The password is hashed client-side (SHA-256) and never transmitted in plaintext to the server.Payment Gating
Monetize your file shares with Stripe integration. Recipients complete a Stripe Checkout before downloading. Requires an active Stripe Connect account.- Configurable pricing in USD
- Platform handles payment processing and payouts
Real-Time Dashboard
Monitor active downloads from your sharing dashboard:- Live connection list with per-downloader progress
- File completion status
- Auto-stop when the download limit is reached
- Manual stop sharing at any time
Checksum Verification
Optional SHA-256 checksums allow recipients to verify file integrity after download.Sharing Flow
For the Uploader
- Navigate to the file sharing page
- Select your files (drag-and-drop or file picker)
- Configure download limits, optional password, and optional price
- Click Start Sharing to generate an encrypted share link
- Share the link via the built-in options (copy, QR code, email, or social)
- Monitor downloads in real-time from the dashboard
For the Downloader
- Open the share link received from the uploader
- Complete payment if required (Stripe Checkout)
- Enter the password if one was set
- Files download and decrypt automatically in your browser
- Optionally verify file integrity via checksums
Security
| Property | Implementation |
|---|---|
| Encryption | AES-256-GCM, key generated and used entirely client-side |
| Zero knowledge | Server never accesses files, keys, or passwords |
| Authenticated transfers | Reader token derived from encryption key prevents slug enumeration |
| Download enforcement | Server-side counter with slot-based tracking |
| Abuse prevention | Report mechanism to flag and close abusive shares |
| Rate limiting | IP-based connection limits and per-message throttling |