A secure file hosting platform with privacy in mind.
All donations go directly to improving the service — for things like more storage, faster servers, and ensuring we can keep providing privacy-focused file hosting for everyone.
Our file hosting service employs industry-standard security measures to safeguard your data and ensure your privacy.
We utilize advanced encryption techniques, including securely generated password salts and keys, to ensure that your passwords are safely stored. For each user, passwords are hashed using PBKDF2-HMAC-SHA256 with a unique salt. This process significantly reduces the risk of password recovery, even in the unlikely event of a breach. Passwords are never stored in plaintext, and each file’s password is securely hashed with their unique salt, ensuring an additional layer of protection against common attacks like rainbow table and brute force.
To protect your sensitive personal information, all IP addresses are encrypted before being stored. We use Fernet symmetric encryption to securely encrypt and decrypt IP addresses. This ensures that even if an attacker gains access to the stored data, they cannot easily extract any IP information associated with file uploads or downloads.
When uploading a file, users have the option to choose whether their file should be password-protected. If they choose to set a password, it is securely hashed and salted before being stored. Files can only be downloaded with the correct password, which is verified against the securely hashed version stored in our database.
We have implemented strict access control to prevent unauthorized access to sensitive files, including configuration files and file metadata. These files are protected, and any attempt to access them directly will result in an automatic 403 Forbidden error.