01_SECURE // one-time delivery
Send it once.
Then it's gone.
Encrypted in your browser with quantum-resistant AES-256 before anything leaves your device. Your recipient opens it once, and the server deletes it the moment it's downloaded.
- AES-256-GCM
- HKDF-SHA-512
- Zero-knowledge
- One-time link
- Up to 300 MB
- No accounts · no trackers
10_DELIVER // link ready
Your one-time link
01_ENCRYPT
Locked on your device
A fresh 256-bit key is generated in your browser. Your message and file are encrypted with AES-256-GCM in 4 MB chunks before upload. We only ever receive ciphertext.
10_DELIVER
Key stays in the link
The key lives after the “#” in the link, a part browsers never send to servers. Add a password for a second factor, hardened with 600,000 rounds of PBKDF2.
11_DESTROY
Opened once, then deleted
The first person to unlock it gets it; everyone after sees “already opened.” The encrypted data is deleted from the server as soon as the download completes.
100_QUANTUM
Built for the post-quantum era
No public-key crypto in the data path, so there's nothing for Shor's algorithm to break. AES-256 and SHA-512 keep a 128-bit-plus margin even against Grover's algorithm.