Learn how we protect your information with end-to-end encryption. The server can never see your data.
From registration to download, everything is designed so that only you can read your files.
Create an account with a username and a Master Password. This password generates your cryptographic keys directly in your browser. The server never receives your password or your private key in plaintext.
The sender uses your public link or a one-time link. Their browser encrypts the files with your public key before sending. The server only receives encrypted data.
Encrypted packages appear in your inbox. When opened, your browser decrypts them in RAM using your private key. You can download files with their original name and extension.
The server acts only as blind storage for encrypted bits.
Encrypts files and message with a random AES key. Encrypts the AES key with your RSA public key.
Stores encrypted binary blobs. Has no keys to decrypt them. Zero-Knowledge.
Your private key (in RAM) decrypts the AES key. The AES key decrypts the files.
All cryptographic processing occurs exclusively in your browser using window.crypto (Web Crypto API).
Your master password is transformed into an AES-256 key via PBKDF2 with 600,000 iterations and SHA-256. A random 16-byte salt makes precomputed table attacks (rainbow tables) impossible.
A RSA-OAEP 4096-bit key pair is generated in your browser. The private key is encrypted with your derived master key before leaving your machine. The server only stores the public key and the encrypted private key.
Each submission generates a fully random AES-GCM 256-bit session key. Files and message are encrypted with this key. The session key is encrypted with the receiver's RSA public key.
All cryptography uses the browser's native API (window.crypto.subtle). No external libraries. No key transmission. Everything runs in the browser sandbox with native performance.
Result: Even if the server were compromised, the attacker could not read your messages or files. Your master password is the only key, and it never leaves your browser.
What the server does see: who receives packages and when, how many files they have and their encrypted size, the sender name the sender typed (not verified), your username and last login, and for shared files their size, limits and expiry (the name is sealed until the password is entered; shares created before that change also show their name and type).
Features designed to maximize your privacy and control.
Generate links that are automatically destroyed after the first successful submission. Perfect for receiving sensitive information from a single source.
Drag & drop a file, set an unlock password, and share a link. The file is encrypted with AES-256-GCM and the key wrapped with PBKDF2 (600K iterations). Recipients decrypt and download entirely in their browser — the server never sees the content, the password or (for new shares) the file name; it does see the size.
You can disable your public link at any time from the dashboard. When disabled, nobody can send you files through it.
Delete packages from the server after reading them. The encrypted files are deleted and their database records overwritten. Packages you keep are deleted automatically after 30 days.
Press Escape twice quickly to instantly log out: your keys are dropped and everything decrypted is cleared from the page.
The server requires HTTPS, ensuring browser crypto APIs are available and the connection is encrypted in transit.