Encrypted before upload
Messages, files, and file metadata are encrypted on your device with AES-GCM using a 256-bit group key. The server receives ciphertext and cannot decrypt the content.
Security model
Built so the server cannot decrypt your content.
file-sharer encrypts messages, files, and file metadata on your devices before upload. The service receives ciphertext, public keys, authentication data, and delivery metadata — but not readable content or private device keys.
Local device identity
Each device creates its own P-256 key pair. Private keys are never sent to the server; an optional encrypted recovery file can restore a device.
Encrypted device pairing
A QR code binds the new device's public key to the pairing. The shared group key is sent only inside an encrypted package.
Temporary server storage
Delivered messages and files are purged when active recipients acknowledge them; a scheduled cleanup removes anything older than 24 hours.