Frequently asked questions

Anonymous browser sends are limited to 10 MiB per send. Sign in with GitHub to send up to 1 GiB per send if your account is at least 180 days old and has at least 2 public repositories. Authenticated sends are also capped at 1.2 GiB per UTC day and 2 GiB per rolling week. In the browser you can send multiple files or a folder (packaged as a zip, up to 500 files). The CLI supports larger transfers and live streaming.

Yes. On the send page, choose multiple files or a folder (or drop them in). They are packaged in your browser as a zip and uploaded as one encrypted share. Short quick links stay single-file only.

You choose when creating an encrypted share: delete it after the first completed download, or keep it for one day, two days, or one week. Short quick links are deleted after download and always expire within two hours.

Encrypted shares can only be decrypted by someone with the complete link. Short quick links are an explicit exception: drop2 stores their contents without end-to-end encryption so the URL can be typed easily. They always require a separately shared PIN.

PIN protection is enabled by default for encrypted shares but can be turned off under Advanced options. A short quick link always requires a PIN because it has no decryption capability in the URL.

drop2 is for legitimate private file transfer, not public content hosting. Cross-share probing and repeated incorrect PIN attempts are rate-limited. Shares that violate acceptable use can be removed without inspecting their encrypted contents.

Yes. Sign in with GitHub on the send page for up to 1 GiB per send (subject to eligibility and daily/weekly quotas), or use the open-source drop2 CLI for larger live or stored encrypted shares. Install it with curl -fsSL https://raw.githubusercontent.com/xreal/drop2/main/scripts/install.sh | bash.