Frequently asked questions

Anonymous browser sends are limited to 10 MiB per send. Sign in with GitHub to send up to 1 GiB per send if your account is at least 180 days old and has at least 2 public repositories. Authenticated sends are also capped at 1.2 GiB per UTC day and 2 GiB per rolling week. In the browser you can send multiple files or a folder (packaged as a zip, up to 500 files). The CLI supports larger transfers and live streaming.

Yes. On the send page, choose multiple files or a folder (or drop them in). They are packaged in your browser as a zip and uploaded as one encrypted share. Short quick links stay single-file only.

You choose when creating an encrypted share: delete it after the first completed download, or keep it for one day, two days, or one week. Short quick links are deleted after download and always expire within two hours.

Encrypted shares can only be decrypted by someone with the complete link. Short quick links are an explicit exception: drop2 stores their contents without end-to-end encryption so the URL can be typed easily. They always require a separately shared PIN.

PIN protection is enabled by default for encrypted shares. Open the PIN control beneath the file picker to turn it off. A short quick link always requires a PIN because it has no decryption capability in the URL.

Paste a password or note at drop2.app/secret. It is encrypted in your browser and the key stays in the part of the link after the #, which never reaches drop2. The link opens once, then the secret is deleted. Unopened secrets expire after one hour, one day, or one week. An optional passphrase is checked by drop2, and five wrong tries destroy the secret.

drop2 is for legitimate private file transfer, not public content hosting. Cross-share probing and repeated incorrect PIN attempts are rate-limited. Shares that violate acceptable use can be removed without inspecting their encrypted contents.

Yes. Sign in with GitHub on the send page for up to 1 GiB per send (subject to eligibility and daily/weekly quotas), or use the open-source drop2 CLI for larger live or stored encrypted shares. Install it with curl -fsSL https://raw.githubusercontent.com/xreal/drop2/main/scripts/install.sh | bash.