Securely share confidential files. Browser-to-browser.
End-to-end encrypted, zero server storage, ephemeral. The authoritative vault for high-stakes professional data transfer.
How Direct Transfer Works
A seamless, trustless connection established entirely within the browser sandbox.
Generate Link
Select your files. We generate a unique, cryptographically secure signaling link.
Share Link + PIN
Send the link and the 6-digit PIN to your recipient — over two different channels.
Recipient Connects
They open the link and enter the PIN, establishing a direct WebRTC connection.
Secure Flow
Files stream directly between browsers. Nothing is uploaded to any server.
Cryptographic Assurance
Built for the stringent requirements of legal and medical professionals. Trust is ensured through mathematics, not promises.
End-to-End AES-GCM
Files are encrypted in your browser with AES-GCM 256 before a single byte leaves your device. The decryption key never touches our servers.
Zero Server Storage
We hold no cloud database of your files. Data flows directly peer-to-peer.
Ephemeral Sessions
Connections are temporary. Once the tab closes, the transfer capability is gone.
PIN-Protected Exchange
Even if a link is intercepted, the connection — and the decryption key — require the out-of-band PIN generated on the sender's device.
Frequently asked questions
Do both people need to be online at the same time?
Yes. SaferDrop is a live, direct transfer — nothing is stored on a server waiting to be picked up. The sender and recipient both keep their tab open while files stream between browsers.
What if a direct connection can't be established?
On strict corporate networks a direct link can be blocked. We then relay the encrypted data through a TURN server that cannot read it — and the app clearly shows an amber 'Relayed' badge so you always know.
How big can my files be?
Up to 100 MB on Free (single file) and up to 2 GB on Pro (multiple files and whole folders).
What happens to the link and PIN?
The link carries the decryption secret in its fragment, which never reaches our servers. Send the 6-digit PIN over a different channel. We never transmit the PIN for you.