Files are encrypted on your device before they ever reach our servers. Send to someone you know or share a self-destructing link — either way, only the intended recipient can read what's inside.
Your files are encrypted on your device with keys that never leave it. Our infrastructure stores ciphertext only — plaintext never crosses the wire.
X25519 key exchange, Ed25519 signatures, and XChaCha20-Poly1305 authenticated encryption. Peer-reviewed primitives from the libsodium library, chosen defaults, no knobs to misconfigure.
Send to a specific person by email or handle — their app decrypts automatically. Or share a self-destructing link with an optional password when the recipient doesn't have an account yet.
Streaming encryption and multipart upload handle files up to 10 GB per transfer. Peak memory on your phone stays around 8 MB regardless of file size.
Every transfer is signed by the sender's key. Recipients see a verified badge, so an attacker can't swap files in transit — even if they somehow got access to our servers.
We collect only what's strictly required for the service to work: your email for account recovery, an optional handle for people to look you up, and encrypted metadata that we couldn't read even if we wanted to.
Choose one file or several. Enter the recipient's email or handle, or pick "share as link" for a shareable URL.
Your device encrypts the file with a per-transfer key. Only the recipient can derive the key to decrypt.
They open the app or the shared link. Decryption happens on their device, and the sender's copy is deleted after the download completes.
