Same simplicity — drop a file, send a link — with one structural difference: the file is already encrypted before it leaves your machine, so nothing readable ever reaches our servers.
“Drop, send, done. And nobody in the middle can look inside.”
For freelancers, agencies, studios and companies who send large files daily and cannot treat every recipient's inbox as a safe place.
Encryption happens in your browser or app. The upload is ciphertext from the first byte, so the service hosting it holds nothing readable.
The decryption key travels in the URL fragment, which browsers never send to a server, and a passphrase gates the open.
Every public link expires within 24 hours at most, with optional view budgets and instant revocation.
Chunked, resumable and verified after upload — a dropped connection costs you seconds, not the whole transfer.
They click, type the passphrase and download. No sign-up wall, no app, no advertising.
Creation, first open and revocation are logged, so you know whether a client actually received the file.
Conventional transfer products receive your file in a form they can read, in order to generate previews, run scanning and serve downloads. That is a reasonable engineering choice for casual sharing, and it is exactly the wrong one for unreleased work, client deliverables under NDA, legal or medical documents, or anything that would be damaging in public.
You drag a file in, you get a link, you send it. Under the surface, a key is derived on your device, the file is sealed with XChaCha20-Poly1305, and the server stores an opaque blob. The recipient's browser does the decryption. Nobody in between has a usable copy.
Send the link by email and the passphrase by phone, SMS or chat. Splitting the two across channels is what makes interception of one channel useless. It takes ten seconds and removes most of the realistic attack paths against a hand-off.
Most people who switch discover the transfer was the symptom: the same files then need to live somewhere, be discussed, be re-shared and be revoked. The same account includes an encrypted drive, team spaces, chat and calls, so the file stops travelling between three products collecting readable copies.
Yes, 1 GB with the same architecture as paid plans. No advertising, and no scanning of what you send.
Yes. Multiple files and folders are supported, each encrypted on the device, and large sets upload in resumable chunks.
Because links that live forever are the most common cause of accidental exposure. A 24-hour ceiling is a deliberate safety property; for continuing access, add the person to an encrypted space instead of extending a public link.
No. Files are encrypted on your device with XChaCha20-Poly1305 before the upload starts, using keys derived locally with Argon2id. Our servers hold ciphertext only, so there is no preview, no scanning and no staff view of your transfer.
No. They open the link in any browser, type the passphrase you shared separately, and the file is decrypted locally on their machine. Nothing to install, nothing to sign up for.
Public share links always expire within 24 hours at most, and you can make them shorter, limit the number of views, or revoke them instantly. Expiry is enforced by the system, not by a reminder.
Uploads are chunked, resumable and verified after upload, so multi-gigabyte transfers survive a dropped connection, a closed laptop or a hotel network. You resume instead of starting again.
Yes. The free plan includes 1 GB with exactly the same zero-knowledge architecture as paid plans, so you can test a real client hand-off before paying anything.
Because we cannot read your data, we cannot reset it for you. Each account creates a Recovery Kit — a printable PDF with a QR code — to store offline. That is the same property that keeps anyone else, including us, out of your account.
Start free with 1 GB. Zero-knowledge encryption from the first upload — no admin override, no AI scanning, no plaintext on the server.
