EnglishEN
end-to-end encrypted file transfer
Your data never leaves your device unencrypted.
No account.
Encrypt & send
My uploadsScan with a phone camera to open the link.
Anyone who sees this code can open it, and the password stays in the browser history of the phone that scans it. Use it only to send to your own phone.
Only you can download this file. Manage and download it from your Orbit dashboard.
Open dashboard →Save this password. It is required to decrypt the file and cannot be recovered.
Quick start
How it works
End-to-end encrypted
Your file is encrypted on your device before upload; the server stores only the encrypted copy. The recipient decrypts it with the password, in the browser or with the CLI.
Ephemeral by design
Every file has a time-to-live (TTL) unless you choose permanent storage on Orbit. When it runs out, the file is permanently deleted.
AI agent ready
Works in automated pipelines and with AI agents. Structured JSON output, non-interactive operation, and clean exit codes.
CLI native
One binary, no account, no config. Install and go.
Install
Limits
Zero knowledge
The server never sees your data. Everything is encrypted before it leaves your device.
File contents
Encrypted on your device before upload. The server only stores ciphertext.File names
Embedded inside the encrypted payload. Invisible to the server.Passwords
Never transmitted. Used locally to derive the encryption key.Encryption
Argon2id + XChaCha20-Poly1305 authenticated encryption.Frequently asked
Can you see my files?
No. Your file is encrypted on your device with your password before it is uploaded, so the server only ever holds encrypted data. The password and the file name never reach us. The one exception is a report: someone who has the password may add it to an abuse report, and it is then kept encrypted for 30 days, only for a valid legal request.
Where are my files stored?
Our servers are in Germany and the encrypted files are stored in the European Union. The service is run from Türkiye.
What if I forget the password?
Then the file cannot be opened, not even by us: there is no reset. If you uploaded it from this browser and kept the password in My uploads, you can see it there.
When is my file deleted?
When the time you chose runs out: from 5 minutes to 7 days on the free plan, up to 30 days or never on Orbit. A one-time file is deleted within 10 minutes of its first download. You can also delete a file earlier from My uploads.
Does the recipient need an account?
No. They open the link and enter the password, and the file is decrypted in their browser. No app, no sign-up.
How does a one-time link work?
It is used up the moment a download starts with the right password. Link previews in chat apps and wrong passwords do not count. If the connection breaks, the same download can pick up where it stopped for a few minutes.
How should I share the link and the password?
Separately, for example the link by email and the password by message. The QR code can carry both; that is meant for sending a file to your own phone.
Is it free? What are the limits?
Yes, with no account: up to 2 GB per file, 10 uploads a day and 7 days of storage. Orbit (€4.99 a month + VAT) raises this to 10 GB per file and 30 days or permanent storage.
How do you make money?
From Orbit subscriptions. There are no ads, and no accounts, cookies, tracking or profiling.
What if I find abuse?
Use "Report abuse" on the file's page. For a formal notice, use the form linked at the bottom of every page.