The layers of protection
- No server copy: the file never goes through our servers, so it can't leak from them.
- Encrypted connection: every transfer is encrypted with DTLS, the protocol behind browser video calls.
- Verified pairing: the key in the link, which our server never sees, proves both browsers are talking to each other and not to an intruder.
- Integrity check: the SHA-256 fingerprint of each file is compared on arrival. A single changed byte is detected.
- Extra protection on Pro and Max: a password checked between the two devices and a second layer of encryption with AES-256-GCM.
What we can and can't see
We can see that a transfer happened, when, how many files it had and their total size. We cannot see file contents or the encryption key. If you use the history feature (Pro and Max), the name of the first file is kept so you can find your transfers.
Accounts are protected too: passwords are hashed with Argon2id, sign-in attempts are rate-limited, and you can turn on two-factor authentication.
Good habits
Send the password through a different channel from the link, for example the link by email and the password by text message. For confidential files, use the link rather than the code so the pairing is verified, and set a maximum number of recipients.
Questions on this topic
Can ShareUrFiles read my files?
No. Files never pass through our servers and we don't have the keys to decrypt the connection.
What happens if someone intercepts the link?
They could join the transfer while it is open, just like the intended recipient. Protect sensitive transfers with a password, a recipient limit or, on Max, a list of allowed emails or manual approval.
Is it safe on public Wi-Fi?
Yes. The connection is encrypted end to end, so people on the same network cannot read the file.
Ready to send?
Drop a file and share a 6-digit code. No size limit, even for free.