Frequently Asked Questions

Security & Privacy

How secure is dropsha.re?

Your files are encrypted using AES-256-GCM encryption directly in your browser before they ever leave your device. We use the same encryption standard that banks and governments rely on. The encryption keys are generated locally and never transmitted to our servers.

Can you see my files?

No, we cannot see your files. All encryption happens client-side using your browser’s Web Crypto API. We only store encrypted blobs that are meaningless without the decryption key, which remains in your browser and is never sent to our servers.

What happens to the encryption keys?

Encryption keys are generated in your browser and embedded in the share URL after the # symbol (URL fragment). URL fragments are never sent to servers - they remain in your browser only. When you share the link, the recipient’s browser extracts the key from the URL to decrypt the file.

Is this really zero-knowledge?

Yes. Zero-knowledge means we have no ability to access your data even if we wanted to. Your files are encrypted before upload, and we never see the decryption keys. We cannot decrypt, read, or access any file content.

What if someone intercepts my file?

Even if someone intercepts the encrypted file from our servers, it’s useless without the decryption key. The file is protected by military-grade AES-256-GCM encryption that would take billions of years to crack with current technology.

Are the share URLs safe?

Share URLs contain the decryption key in the URL fragment (after #). Be careful who you share these links with, as anyone with the full URL can download and decrypt your file. The fragment is not sent to servers when clicking links.

File Management

What file types can I upload?

You can upload any file type up to 50MB. Since encryption happens client-side, we don’t restrict file types - your browser encrypts everything the same way.

How long are files stored?

Files are automatically deleted after 7 days. This ensures your data doesn’t accumulate on our servers indefinitely and maintains privacy.

Can I delete my file early?

Currently, files are automatically deleted after 7 days and cannot be manually deleted early. This is part of our zero-knowledge design - we can’t identify which files belong to which users.

What’s the file size limit?

The current limit is 50MB per file. This balances usability with storage costs while handling most common file sharing needs.

Can I upload multiple files?

Currently, you can upload one file at a time. Each file gets its own unique encrypted link.

What happens if I lose the share link?

If you lose the share link, the file cannot be recovered. Since we use zero-knowledge encryption, we have no way to identify or access your files without the original link containing the decryption key.

Technical Details

What encryption do you use?

We use AES-256-GCM (Galois/Counter Mode) encryption with randomly generated 256-bit keys. This provides both encryption and authentication, ensuring files haven’t been tampered with.

How are encryption keys generated?

Keys are generated using your browser’s Web Crypto API with crypto.subtle.generateKey(), which uses cryptographically secure random number generation. Each file gets a unique key.

Where are files stored?

Encrypted files are stored on Cloudflare R2 object storage, which provides high reliability and global distribution. Only encrypted data is stored - never plaintext files.

Can I use this with curl/wget?

Yes! Each share page includes command-line instructions for downloading and decrypting files using curl and OpenSSL. The decryption commands are customized with your specific key.

Do you use HTTPS?

Yes, all traffic is encrypted in transit using HTTPS/TLS. This protects the encrypted files and share URLs from interception during transmission.

Usage & Limitations

Is dropsha.re free?

Yes, dropsha.re is completely free with no registration required. You can upload files up to 50MB and store them for 7 days at no cost.

Do I need to create an account?

No account is needed. The service is designed to be anonymous - just upload a file and share the link. This enhances privacy by not requiring any personal information.

Are there usage limits?

Currently, the main limits are 50MB per file and 7-day retention. There are no explicit upload quotas, but we may implement fair-use policies if needed to prevent abuse.

Can I use this for commercial purposes?

You can use dropsha.re for legitimate file sharing needs, but please don’t abuse the service. Heavy commercial usage should consider supporting the project or running your own instance.

What’s not allowed?

Don’t upload illegal content, malware, or use the service to violate laws. While we can’t see your files due to encryption, we reserve the right to terminate service for violations of our terms.

What browsers are supported?

Modern browsers that support the Web Crypto API work best: Chrome, Firefox, Safari, and Edge. The encryption requires JavaScript to be enabled.

Troubleshooting

Why can’t I download my file?

Check that you have the complete share URL including everything after the # symbol. The decryption key is in that fragment and is required to decrypt the file.

The download says “invalid key”?

This usually means the URL was incomplete or corrupted. Make sure you have the full URL with the # fragment. Sometimes messaging apps or email clients truncate URLs.

My file won’t upload?

Check that your file is under 50MB. Very slow connections might timeout during upload. Try refreshing the page and uploading again.

The page won’t load?

dropsha.re requires JavaScript for the client-side encryption. Make sure JavaScript is enabled in your browser and you’re using a modern browser version.

Can I recover a deleted file?

No, files are permanently deleted after 7 days. There are no backups or recovery options due to our zero-knowledge architecture.

Privacy & Data

What data do you collect?

We collect no personal data. We store only encrypted files, basic metadata (encrypted filename, size, upload time), and temporary file IDs. No IP addresses, user identifiers, or tracking data.

Do you use cookies or tracking?

No cookies or tracking technologies are used. We don’t build user profiles or track behavior across sessions.

What about analytics?

We use privacy-focused analytics that don’t collect personal information. No individual users are tracked or identified.

Can law enforcement access my files?

Even if compelled, we cannot decrypt your files because we don’t have the encryption keys. We can only provide encrypted blobs that are useless without the keys that remain in your browser.

What’s your business model?

Currently, dropsha.re is a free service operated by Magic Monad. Future sustainability may include optional premium features while keeping the core service free.