SecretDrop – Encrypted file sharing for developers

Summary: SecretDrop enables secure file sharing by encrypting files in the browser with AES-256-GCM before upload, ensuring that servers never access plaintext data. It supports password-protected links and direct recipient encryption using public-key cryptography, eliminating the need for shared passwords.

What it does

SecretDrop encrypts files client-side using AES-256-GCM and allows sharing via password-protected links or direct end-to-end encrypted transfers to recipients identified by email. Private keys remain encrypted in the browser, and the system uses WebCrypto standards without third-party libraries.

Who it's for

It is designed for developers, freelancers, agencies, and teams needing to securely share sensitive files like credentials and configuration data without relying on insecure channels.

Why it matters

SecretDrop addresses the risk of exposing secrets through insecure methods like Slack or email by providing zero-knowledge, client-side encryption that prevents servers from accessing unencrypted data.