Free End-to-End Encrypted File Sharing With 12-Hour Self-Destruct
Share files and complete folder hierarchies anonymously with end-to-end encryption in transit and AES-256-GCM at rest, cryptographically random tokens, instant QR codes, real-time SHA-256 pre-flight integrity verification, and automatic cloud purge.
Click to select files, or drag & drop files / folders
Any file type supported (PDF, images, videos, docs, code, ZIP) • Max 100 MB Limit
Simple, Controlled Temporary Sharing
How FileGuard protects files during transit, rest, and destruction
Upload & Hash
Your file is saved in isolated server-side storage with an unpredictable internal UUID. An authoritative SHA-256 reference hash is calculated immediately.
Share Link & QR
Receive an 8-digit CSPRNG tokenized URL and instant QR code. The token itself is hashed with SHA-256 at rest to guard against database leak disclosure.
Verify & Destroy
Recipients download the file only after real-time SHA-256 integrity verification. After exactly 12 hours, the file is automatically purged from disk and cloud storage.
How End-to-End Encryption Protects Your Data
From client memory to cloud storage, every transfer traverses a zero-exposure pipeline ensuring total confidentiality, authenticated integrity, and unrecoverable 12-hour self-destruction.
Browser Ingestion & Pre-Flight Hash
Files and folder trees are read directly in browser memory without unencrypted temporary staging. An authoritative 256-bit SHA-256 reference hash is calculated chunk-by-chunk before committing bytes to transit.
TLS 1.3 Transport Tunnel
Data streams traverse high-grade TLS 1.3 encrypted tunnels with Perfect Forward Secrecy (PFS). Packet sniffers, hostile public Wi-Fi networks, and internet service providers receive only scrambled ciphertext.
AES-256-GCM Storage Vault
Objects committed to Backblaze B2 S3 storage are transparently encrypted with AES-256-GCM authenticated envelopes. Raw share tokens are returned strictly to the uploader; only irreversible digests reside in the database.
Anti-Tamper Gate & 12h Purge
When the recipient requests download, bytes are re-hashed in real time before transmission. Any single-bit corruption triggers an instant HTTP 409 Anti-Tamper block. At 12 hours, files are permanently erased.
Why Use FileGuard for Quick Transfers (Under 100 MB)?
Big cloud drives and heavy transfer portals are great for gigabyte-scale backups, but they add sign-in friction, email verification loops, and permanent clutter for quick, everyday file drops.
| FEATURE / WORKFLOW | FILEGUARD | GOOGLE DRIVE | WETRANSFER | SEND ANYWHERE |
|---|---|---|---|---|
| Account Requirement | None (Instant 1-Click Drop) | Sign-in with Google Account | Email + 6-Digit Code Loop | No Account Required |
| Sender Anonymity | 100% Anonymous (Zero Metadata) | Exposes Profile Name & Email | Exposes Sender Email Address | Anonymous for Key Transfers |
| Storage Retention | Auto-Purged in 12h (0 Clutter) | Never Expires (Eats 15 GB Quota) | 3-Day Temporary Hold | 10-Minute Key Expiry |
| PIN / Password Lock | Free & Built-In | Google Account ACL Only | Paid Pro Only ($12+/month) | Paid Plan Only |
| Ad Experience | 100% Ad-Free & Zero Tracking | Account Activity Tracking | Full-Screen Ads & Marketing Cookies | Banner & Video Ads |
Everything You Need To Know About FileGuard
Answers to common questions regarding security, retention policies, and file sizes.
How long are shared files stored on FileGuard?
Do I or the recipient need to create an account?
Can I upload an entire folder without compressing it first?
How does the pre-flight SHA-256 anti-tamper check work?
What is the maximum file size limit and upload quota?
Can I revoke or delete my file before 12 hours?
Engineered for Information & Network Security
Defensive design principles implemented across all layers of the stack
End-to-End & At-Rest Encryption
Data streams are secured end-to-end with TLS 1.3 cryptographic transport and transparent AES-256-GCM encryption at rest on Backblaze B2 S3 storage.
SHA-256 Integrity Verification
Files are re-hashed on download and against administrative audit requests. If any byte is altered in storage, downloads are immediately blocked.
Strict 12-Hour Expiration
Enforced authoritatively by server clocks. Expired links are rejected instantly, and background workers securely unlink and erase storage copies.
Cryptographic Share Tokens
Generated via Python's secrets CSPRNG. Stored hashed at rest using SHA-256 so compromise of metadata never reveals active download links.
Multi-Layer Threat Defense
Automated VirusTotal threat intelligence scanning, brute-force throttling, and cryptographic integrity verification guard every transfer.
In-Memory Bundling & Quotas
Multiple files and whole folders are packaged into streaming ZIPs in memory with zero disk staging, protected by a rolling 100 MB client-IP quota to stop abuse.
FileGuard implements cryptographic integrity verification via SHA-256 to ensure delivered bytes match the exact upload snapshot (detecting bit-rot and tampering). Stored objects are protected with AES-256-GCM encryption at rest in Backblaze B2 cloud storage and automatically purged after 12 hours.