Dead Drop
Move a file or some text to another device or person as one encrypted link. Encrypted in your browser — one-time links, expiry and passphrase optional.
Keep in mind: anyone with this link can open the drop. The part after # is the key — it is not sent to the server, not in logs, not recoverable if lost.
What Dead Drop does
Dead Drop turns a file or a piece of text into a single link that you can pass on through any channel. The content is
encrypted in your browser before anything is uploaded, and the key that opens it never becomes part of the address the
server sees: it sits behind the # in the link, and browsers do not send that part of a URL to a server.
No account, no app, nothing to install — on either side.
How a drop works
- You pick a file, or type a password, a recovery phrase or a note. Nothing has left your device yet.
- Your browser generates a random AES-256-GCM key and encrypts the content with it.
- Only the encrypted bytes are uploaded. The key is appended to the link behind the
#. - You pass the link on — chat, mail, a phone call, a slip of paper.
- The recipient opens the link. Their browser reads the key out of the link and decrypts the content locally.
What you can set
- Expiry — between one hour and 30 days. Every drop expires; 30 days is the ceiling.
- One-time link — the link stops working once it has been opened.
- Extra passphrase — a second secret you agree on through another channel. The link alone is then not enough.
- Not before — the drop stays shut until a moment you choose.
- Note — a short label that only you see in your own console, never the recipient.
What people use it for
Handing a password to someone who is not on your password manager. Moving a recovery phrase to a second device. Passing an API key to a contractor. Getting a scanned document off a phone. Anything you would rather not leave sitting in a chat history for the next three years.
Questions
How large can a file be?
100 MB per drop. Anything larger has to be split up first.
How long does a link stay alive?
You choose between one hour and 30 days, and 7 days is preset. There is no drop without an expiry — 30 days is the maximum.
What happens if I lose the link?
The key exists only inside the link. If the link is gone, the content cannot be opened again. There is no reset and no recovery — that is the point of the design.
Does the recipient need an account?
No. Neither side registers for anything. The recipient opens the link in any current browser.
Can the same link be opened twice?
Yes, as often as you like — unless you ticked one-time link. Then the first open is the only one.
Is the content stored encrypted?
Yes. Encryption happens in your browser, and the content arrives at the server as ciphertext. The file name and the note you write for yourself are stored as plain text, because the console needs them to list your drops.
Which browsers work?
Any current browser with Web Crypto: Chrome, Firefox, Safari, Edge — desktop and mobile alike.
What does it cost?
Nothing. There is no account, no plan and no upsell.