Send files encrypted in your browser
Your browser encrypts your files and text before they upload. No account needed. Free.
Encrypted in your browser
AES-256-GCM, before anything uploads.
Any file type
Documents, images, archives, anything.
Links that expire
After 1 hour, 1 day or 3 days. Then we delete the files.
Optional passcode
Recipients need the link and the passcode.
Free sender or Strac Comply?
Use this page to send a file once. Use Secure Share in Strac Comply when your team shares files every day.
Free sender
$0
- Encrypted in your browser (AES-256-GCM)
- Up to 10 MB per package
- Up to 2 files per package
- Links last up to 3 days
- Passcode protection
- View and download limits
- We email the link to your recipient
- Not included: Dashboard and download log
- Not included: Revoke a link
- Not included: Salesforce and Zendesk apps
- Not included: A dropzone link to receive files
Strac Comply
Secure Share for your team. 14-day free trial. No credit card.
- Everything in the free sender
- Up to 250 MB per file
- Links last up to 90 days
- A dashboard of every package you sent
- Download log: when, IP address and browser
- Revoke any link in one click
- Salesforce and Zendesk apps
- A dropzone link so customers can send files to you
- Plus the compliance platform: SOC 2, ISO 27001, PCI DSS, HIPAA, NIST CSF and more
Frequently asked questions
How are my files protected?
Your browser encrypts your files and text with AES-256-GCM before they upload, so the file we store is unreadable on its own. The key is part of the share link, and it stays in your browser unless you ask us to email the link. Anyone with the full link can open the files, so share it only with your recipient.
How is the encryption key shared?
The key sits in the share link, after the #. When your recipient opens the link, their browser reads the key and decrypts the files on their own device. Browsers don't send the part after the # to a server when they load a page (RFC 3986, the URL standard).
If you add a recipient email, the full link passes through our server so we can email it. We keep it with the package.
What happens when a link expires?
The link stops working and shows "This share link has expired." Within an hour we permanently delete the encrypted files from our storage.
Is it free?
Yes. Send encrypted files with no account and no payment. The free sender takes up to 2 files and 10 MB per package, and links last up to 3 days.
What file types and sizes can I send?
Every file type: documents, images, archives, anything. Here you can send up to 10 MB and 2 files per package. Secure Share in Strac Comply takes up to 250 MB per file.
How is this different from SendSafely?
Both encrypt files before they leave your browser. Strac is also a security company: Strac Data Security (DLP and DSPM) finds and protects sensitive data, and Strac Comply runs your compliance program. This free sender is one small part of that.
What if I need to revoke access to a shared file?
You can't revoke a link from this free page. It stops working on the expiry you picked, or when it hits a view or download limit.
Send from Secure Share in Strac Comply, and you can revoke any link in one click. Your recipient then sees "This share link has been revoked."
Does this help with SOC 2 or HIPAA?
It helps with one piece. Your browser encrypts the files before they leave your device, and they travel over HTTPS. They don't sit in an email thread.
To pass an audit, you need much more than a file tool. Strac Comply runs the rest, for SOC 2, ISO 27001, PCI DSS, HIPAA, NIST CSF and more.
Need a download log, revoke, or the Salesforce and Zendesk apps?
Use Secure Share in Strac Comply. 14-day free trial. No credit card. See how Secure Share works.
Start free trialPlans from $4,995 per year. See pricing