ENCRYPTED SECURE FILE DROP
End-to-end client-side encryption powered by browser-native Web Crypto (AES-256-GCM). Files are encrypted before leaving your machine and deposited into high-speed Cloudflare edge storage with automatic link expiration and one-time self-destruct.
Send this link to the recipient. The decryption key is embedded in the URL fragment (#key=...) and is mathematically impossible for anyone without this link to decrypt.
Claim Your Encrypted File
Enter the claim code and decryption key below, or open the link directly in your browser. Decryption occurs locally on your device.
1. Client-Side AES-256-GCM
Files are converted into binary buffers and encrypted with native browser cryptography (Web Crypto API) before transmission. The plaintext data never touches the network wire.
2. Zero-Knowledge Key Isolation
The 256-bit symmetric key is appended strictly to the URL fragment (#key=...). According to HTTP standards (RFC 3986), fragment identifiers are never transmitted to web servers, reverse proxies, or DNS logs.
3. Automated TTL & Self-Destruct
Payloads are cached directly across Cloudflare's edge network and automatically purged when the TTL expires. When "Burn after reading" is enabled, the edge worker deletes the ciphertext the exact instant it is claimed.