Ghost Drop

A private file handoff flow that encrypts first, uploads second, and makes the password your separate control layer.

How it works

  1. 1. Encrypt before upload — Your file is encrypted in the browser first. The host only receives encrypted bytes or a PNG wrapper that contains them.
  2. 2. Share the file link — After upload, share the resulting link with the recipient. Send the password through a separate channel.
  3. 3. Decrypt locally — The recipient downloads the encrypted package and decrypts it locally in the browser with the password.

Important: This improves privacy, but the temporary host can still see upload metadata such as time, size, and file type wrapper.