TEMPORARY SHARING
Drop.
No-account, end-to-end encrypted file and text sharing that expires.
WHAT IT IS
Temporary sharing without an account.
Drop sends a file or a block of text through a short-lived link. New drops are encrypted in the sender’s browser with AES-256-GCM, and every drop expires after 30 minutes.
Choose file or text
Drag in a file, choose one, or paste the text you want to send.
Let the browser encrypt it
The content is encrypted before upload. Large files are handled as independently authenticated 32 MiB chunks.
Send the complete link
The decryption key lives in the URL fragment. The server does not receive that fragment, but the recipient needs the whole link.
It disappears
The encrypted content is removed after 30 minutes. An expired link reports that it expired instead of pretending it never existed.
SECURITY MODEL
What Drop can and cannot see.
| Data | Visibility |
|---|---|
| File or text contents | Encrypted in the browser for new drops. The service stores ciphertext. |
| Decryption key | Kept in the share-link fragment and not sent in HTTP requests. |
| Metadata | The service can still observe unavoidable metadata such as ciphertext size, timestamps, IP address, and the short drop ID. |
| Lifetime | Content is deleted server-side after 30 minutes. |
USE COMMON SENSE
End-to-end encryption protects content in transit and at rest on the service. It cannot protect a link copied to the wrong person, a compromised device, or a recipient who saves what you sent.