Skip to content
drop2
Send files Secrets How it works

Encrypted in your browser

Share a secret.

Opens once. Then it’s gone.

Send it separately, never with the link.

Expires after 1 day
Expires after

How your secret is protected

  • Encrypted on your device

    AES-256-GCM, the standard behind HTTPS, using your browser’s built-in Web Crypto.

  • We never see the key

    It lives after the # in the link. Browsers never send that part to a server.

  • Burned after one view

    Deleted from our database the moment it’s opened, or when it expires.

Read the encryption code on GitHub ↗

Your link is ready.

Opens once. Expires in 1 day.

Send the passphrase through another channel.

Destroy this link? Nobody will be able to open it.

Someone sent you a secret.

You can view it once. After that, it’s deleted.

Decrypted in your browser. drop2 can’t read it.

Your secret

Deleted from drop2. This is the only copy.

This secret is gone.

It was already viewed, expired or destroyed.

This secret was destroyed.

Too many wrong passphrases. Ask the sender for a new link.

Link destroyed.

Nobody can open it anymore.

This link is incomplete.

Ask the sender for the full link, including everything after the #.

Unable to decrypt this secret.

It has been deleted. Ask the sender for a new link.

Unable to reach drop2.

Check your connection and reload the page.

Share a secret

Encrypted in your browser. drop2 never sees the key.

Send filesSecretsHow it worksSecurityGitHub