files are encrypted in your browser before upload. the server never sees your plaintext, keys, or passwords.

• zero-knowledge encryption (AES-256-GCM), performed entirely on the client
• encrypted filenames — the server never knows what you're sharing
• your link is your key: anyone with the URL can decrypt (unless password-protected), but the key is never sent to the server
• password mode uses 5 Diceware words from a 7,776-word list (~64.5 bits of entropy) by default. not satisfied? use your own — password generation happens locally in your browser
• metadata stripping is a BETA feature and is NOT perfect — it aims to remove EXIF/GPS from images. it's good opsec to strip metadata yourself before a file ever leaves your device to a potential adversary
• no accounts, no tracking, no logs
• files auto-delete on expiry or after their download limit
• max file size (this instance): 2 GB
• max paste size (this instance): 5 MB
• shred will always be free & open source — host your own instance with any configuration