Security

How to Send Files Securely: A Practical 2026 Guide

The four principles that actually make a file transfer secure, the mistakes that undo them, and how to send something sensitive in under a minute.

“Securely” is a word a lot of tools claim and few define. This guide cuts through it: the four things that actually make a file transfer safe, the common mistakes that quietly undo them, and how to send something sensitive in under a minute.

The four principles of a secure transfer

Strip away the marketing and every genuinely secure transfer does these four things:

  1. Scramble it before it leaves your device. The file should be scrambled from the instant it leaves your hands. That’s the heart of end-to-end encryption.
  2. Don’t leave a copy behind. When a room is closed, its files and room details are being removed from our storage. Our cloud provider may keep a recoverable copy for up to 7 days.
  3. Control who can open it. Only the intended recipient should hold the means to unlock it — not anyone who stumbles onto a link.
  4. End access when you are done. When a room is closed, its files and room details are being removed from our storage. Our cloud provider may keep a recoverable copy for up to 7 days. The room closes when the timer ends, if a tab is still open.

Common mistakes that quietly undo your security

  • Emailing a password next to the file. If both travel the same channel, you’ve protected nothing.
  • Reusing a “share link” for a sensitive file. Links get forwarded, indexed, and forgotten.
  • Trusting “private” to mean “unreadable.” Private often just means “not listed,” not “encrypted.”
  • Leaving the file up “just in case.” Every extra day online is extra exposure for no benefit.

How secure transfer methods compare

*Our cloud provider may keep a recoverable copy for up to 7 days.
CapabilityJustDrop
Stored copyBeing removed when you press Close*
Files removed whenWhen the room is closed
No account neededYes

Send something sensitive in under a minute

  1. Open a room. Files are encrypted in your browser before upload.
  2. Drop the file in; it’s encrypted on your device before anything is sent.
  3. Share the short code with your recipient through a separate channel from the file itself.
  4. They open it in any browser. When a room is closed, its files and room details are being removed from our storage. Our cloud provider may keep a recoverable copy for up to 7 days.

Going deeper on a specific case? See sending confidential documents, removing a file when the room is closed, or the plain-English explainer on file sharing encrypted in your browser.

Frequently asked

What is the most secure way to send a file?
Open a room. Files are encrypted in your browser before upload. When a room is closed, its files and room details are being removed from our storage. Our cloud provider may keep a recoverable copy for up to 7 days. A room-and-code transfer does this without setup. The room closes when the timer ends, if a tab is still open.
Is email a secure way to send sensitive files?
Generally no. Email is encrypted in transit but providers can read and retain attachments, and messages linger in inboxes and backups. For sensitive files, use a transfer that is encrypted in your browser and removes the file when the room is closed. When a room is closed, its files and room details are being removed from our storage. Our cloud provider may keep a recoverable copy for up to 7 days.
Does “encrypted in transit” mean my file is private?
Not on its own. Encrypted in transit only protects the file while it moves across the network. End-to-end encryption means the file is encrypted on the sender's device and decrypted on the recipient's.