ttl.space · Sensitive files. Sent from terminal. Gone when due.

End-to-end encrypted, time-limited file transfer for developers and automated pipelines.

Encrypt & send

Drop a file here or click to browse

Max 2 GB · end-to-end encrypted · 7-day TTL

Need more? 10 GB/file · 30-day TTL · Orbit →

Quick start

quick start

$ ttl send starmap.pdf No password provided. Generate one? [Y/n]: Generated password: aB3kL9mX ·✧★◉ Thank goodness, starmap.pdf is in orbit (2.1 MB) IMPORTANT! Save your password — required to download and decrypt the file. Password: aB3kL9mX https://ttl.space/xK9mQ2vLpA $ ttl get https://ttl.space/xK9mQ2vLpA Enter password: ******** Password verified ◉★✧· Phew, starmap.pdf landed safe and sound (2.1 MB)

How it works

End-to-end encrypted

Everything is encrypted on your device before upload. The server stores only ciphertext.

Ephemeral by design

Every file has a TTL. When time is up, it is permanently deleted. Nothing lingers.

AI agent ready

Works in automated pipelines and with AI agents. Structured JSON output, non-interactive operation, and clean exit codes.

CLI native

One binary, no account, no config. Install and go.

Install

homebrew

$ brew install tweenietomatoes/ttl/ttl

scoop

$ scoop bucket add ttl https://github.com/tweenietomatoes/scoop-ttl $ scoop install ttl

binary

# Download from GitHub Releases $ curl -Lo ttl.tar.gz \ https://github.com/tweenietomatoes/ttl/releases/latest/download/ttl_linux_amd64.tar.gz $ tar xzf ttl.tar.gz && sudo mv ttl /usr/local/bin/

$ go install github.com/tweenietomatoes/ttl/cmd/ttl@latest

Usage guide → GitHub →

All files are automatically deleted after their TTL expires. Designed for short-lived transfers.

Limits

2 GB max file size

7 days max retention

10 / day uploads per IP

30 / 10s requests per IP

Zero knowledge

The server never sees your data. Everything is encrypted before it leaves your device.

File contents Encrypted on your device before upload. The server only stores ciphertext.

File names Embedded inside the encrypted payload. Invisible to the server.

Passwords Never transmitted. Used locally to derive the encryption key.

Encryption Argon2id + XChaCha20-Poly1305 authenticated encryption.