Guide · Private sharing
A private link is only as careful as its sender.
Passwords and expiration reduce casual access, but safe sharing also depends on who receives each secret, what the file contains, and what happens after download.
Verify the recipient first
Confirm the recipient through a channel you already trust. A copied profile name, forwarded message, or unfamiliar phone number is not enough for sensitive data. Tell the recipient what general type of file to expect without placing secrets in the message.
Separate the link and password
Send the Dropfile link through one channel and the password through another when practical. If one conversation is compromised, the attacker should not automatically receive both parts.
Prefer generated passwords
Dropfile's generated passwords use browser randomness and avoid personal words. If you create your own, use a long unique value that has not been used for an account. Never reuse a banking, email, or device password.
Use the shortest practical window
Choose 15 minutes when both people are ready. Use one hour only when the file size or coordination requires it. Expiration blocks new joins; it does not recall a file that someone already downloaded.
Add file-level encryption for high-risk data
For legal, financial, medical, identity, or business-confidential material, encrypt the archive or document before selecting it in Dropfile. Share that encryption password separately from the Dropfile password.
Close the session deliberately
Wait for the recipient to confirm the file opens correctly, then use Stop sharing. If the link reaches an unintended person, stop immediately and create a new share with a new password.