How SecureDrop Works
Three simple steps to share files securely. No servers storing your data, no accounts to create, no limits to worry about.
Select Your Files
Drag and drop any files you want to share, or click to browse. There are no file size limits — share everything from documents to large video files.
Share the Link
Generate a unique secure link and send it to your recipient via any messaging platform. You can also show a QR code for in-person sharing.
Download Securely
When your recipient opens the link, the file transfers directly from your browser to theirs. End-to-end encrypted, server-free delivery.
The Technology Behind It
SecureDrop uses WebRTC (Web Real-Time Communication) to establish direct peer-to-peer connections between browsers. Once connected, files are transferred through encrypted data channels without passing through any servers.
DTLS Encryption
All data channels are secured with Datagram Transport Layer Security.
No Server Storage
Files never touch our servers. We only facilitate the initial handshake.
Ephemeral Links
Links expire immediately when you close your browser.
Zero Knowledge
We have no way to see what files you share or with whom.
Frequently Asked Questions
Yes! Your files are transferred directly between devices using peer-to-peer technology. Our servers are only used for the initial connection setup (signaling) — we never see or store your actual files.
There are no hard limits on file size. Since files transfer directly between browsers, the only constraints are your device memory and internet connection speed.
No! SecureDrop is completely anonymous. No accounts, no emails, no tracking. Just share and receive.
Share links are active only while you keep the share page open. Once you close your browser or navigate away, the link becomes invalid and no one can access your files.
If the connection is interrupted during transfer, the recipient can simply click the download button again to resume. Large file transfers are sent in chunks to handle connection issues.
Yes! All peer-to-peer connections use WebRTC with DTLS encryption. Your files are encrypted during transit and can only be decrypted by the intended recipient.