Send files securely, without trusting the middleman

Most “secure” file-sending tools mean the connection is encrypted in transit — but the provider can still read the file once it lands. Sending files securely, in the sense that matters, means the service itself only ever holds ciphertext, never the key.

Send files encrypted

ShieldFive Send encrypts each file in your browser before it is uploaded. The recipient opens the link and decrypts in their browser with the key from the link fragment. In between, only ciphertext exists on our servers.

“Secure” means end-to-end here

Encrypted in transit only means the pipe is protected and the destination can read what arrives. Here the file is encrypted on your device and decrypted on the recipient’s, with the key in the link fragment that browsers never transmit. The middle of the journey holds ciphertext.

Auditable, not just asserted

The transfer is sealed with a random key under XChaCha20-Poly1305 from the open-source @shieldfive/crypto core. You can read the code that does it, which is a stronger basis for the word “secure” than a padlock icon.

A deadline on the link

You set an expiry and the link also stops at its download limit. After either, the ciphertext is queued for deletion — so a link forwarded onward months later opens nothing.

EU-hosted, nothing readable stored

Encrypted blobs live in the EU, with no tracking on the send or download pages. There is no readable copy at rest for a breach, an insider, or a legal request to reach.

Send a file in seconds

Drop it, share the link, and it’s encrypted before it leaves your device — no account required.

Send files encrypted

Questions

What does “securely” actually mean here?
It means end-to-end: the file is encrypted on your device and decrypted on the recipient’s device. The key never reaches our servers, so a breach of our storage exposes only ciphertext.
How does the recipient open the file?
They open the link you send. Their browser reads the key from the fragment, downloads the ciphertext, and decrypts it locally — no account or software needed.