Built for Privacy.
Built for People.
FileShot.io is a zero-knowledge file sharing platform. We encrypt everything in your browser before it ever touches our servers — and the decryption key never leaves your device.
Our Mission
Privacy isn't a feature — it's the foundation. FileShot was built on one principle: your files should be yours, and only yours. We don't read them, scan them for ads, or sell your data. Zero-knowledge means exactly that — we know nothing about what you share.
Meet the Founder
Brendan G.
Independent Developer
FileShot is a solo indie project built from scratch. Brendan is an independent developer focused on creating practical privacy tools that anyone can use without needing a computer science degree. Every feature is designed to protect users first, not monetize their data.
How Zero-Knowledge Works
Your browser does all the heavy lifting. Our server never sees plaintext.
Encrypt in Your Browser
AES-256-GCM encryption runs entirely in your browser using the Web Crypto API. A unique key is derived using Argon2id before your file is touched.
Upload Ciphertext Only
Only the encrypted blob reaches our servers — never the plaintext. We cannot read your file even if compelled.
Key Lives in the URL
The decryption key is embedded in the URL fragment (#). Fragments are never sent to servers by browsers — only you and your recipient ever hold the key.
Our Values
Four principles that drive every decision we make.
Privacy First
Every product decision starts with one question: does this protect the user? If not, it doesn't ship.
Transparency
Open-source cryptography you can audit. No black boxes. No dark patterns. No hidden telemetry.
Simplicity
Privacy shouldn't require a manual. FileShot works in one click — no accounts, no configuration, no learning curve.
Security
AES-256-GCM. Argon2id key derivation. All uploads encrypted by default. Zero retention after expiry. Hardened by design.
Technology & Infrastructure
Built on proven open standards — nothing proprietary, nothing closed.
| Encryption | AES-256-GCM via Web Crypto API — native browser primitives, no JavaScript crypto libs |
| Key Derivation | Argon2id — 64 MB memory, 2 iterations, 256-bit salt per file |
| Abuse Prevention | File-type enforcement, rate limiting, and behavioral signals. We do not scan file contents. |
| Key Transport | URL fragment (#key) — never transmitted to server per browser specification |
| Edge Delivery | Cloudflare CDN with HTTPS everywhere — TLS 1.3, HSTS, strict CSP headers |
| Source Code | github.com/FileShot/FileShotZKE — audit it yourself |
Get in Touch
Real humans read every message. We respond within 24 hours.
Start sharing privately.
No account required. Upload a file right now — encrypted, zero-knowledge, free.
Go to FileShot.io