Edge Rewrite
// request.cf · coarse context

A page that knows where it met you.

Only coarse request metadata is shown. This demo does not display or persist visitor IP addresses.

Country
US
Cloudflare location
EWR
Connection
HTTP/2
Language
Not provided

Ray ID: a469c40a9e661492

Jump to content

Draft:FileShot

From Wikipedia, the free encyclopedia


FileShot
Available inEnglish
OwnerBrendan Gray
FounderBrendan Gray
CommercialYes
RegistrationOptional
Current statusActive

FileShot (also FileShot.io) is a file sharing service that uses zero-knowledge, end-to-end encryption: files are encrypted in the user's web browser before upload, and the decryption key is not sent to FileShot's servers.[1] The service also offers encrypted chat, peer-to-peer transfers, a paid-download feature, desktop clients, and a set of browser-based file tools.[2] FileShot was created by independent developer Brendan [FILL IN] and is based in the United States.[1]

History

[edit]

FileShot was developed as a solo independent project.[1] Started in November 2025, it quickly gained traction in privacy-focused communities online.[3]

Technology

[edit]

Encryption

[edit]

FileShot performs all cryptographic operations with the browser's built-in Web Crypto API and does not use third-party JavaScript cryptography libraries.[4] Files are encrypted with AES-256-GCM using 96-bit nonces and 128-bit authentication tags.[4]

Files are encrypted in a streaming fashion into a container format the company calls FSZK (FileShot Zero-Knowledge). The container has a JSON header (filename, MIME type, salt, chunk size) followed by independently encrypted chunks, 512 KB by default. Because of this, the browser does not need to hold the whole plaintext file in memory.[4]

Key management

[edit]

In the default mode, the browser generates a random 256-bit key for each file and places it in the URL fragment of the share link. Under RFC 3986, browsers do not send the fragment to the server, so the key does not appear in server or CDN logs.[4] In password mode, the file key is wrapped with a key derived from the password using Argon2id (64 MB memory, 2 iterations, parallelism 1). The server stores only the wrapped key and a bcrypt hash used as an access gate.[4] Because FileShot does not hold users' keys, it cannot recover files if a password is lost.[4]

The encryption library is published as open source on GitHub.[5] The site also provides a page for users to check the encryption flow themselves.[6]

Abuse prevention

[edit]

Because uploads are encrypted before they reach the server, FileShot states that it does not and cannot scan file contents. It relies instead on file-type enforcement, rate limiting, and behavioural signals such as download patterns.[4]

Infrastructure

[edit]

FileShot's primary servers and file storage are located in the United States. Static web assets are delivered through Cloudflare; encrypted file content is not cached at the CDN layer.[4]

Features

[edit]
  • File sharing: uploads with optional password protection, expiration dates and download limits. No account is required to upload.[4][1]
  • Encrypted chat: chat rooms that anyone can join; signed-in users can create rooms and send files.[2]
  • Peer-to-peer transfers.[2]
  • Paid access: account holders can set a price on a file link. Buyers pay through Stripe, and the seller receives 91% of the sale.[2]
  • File tools: browser-based utilities including a file converter, PDF editor, archive builder, file compressor, secure paste, video-to-GIF converter and a video downloader.[1]
  • Desktop applications: open-source clients built with Tauri 2 for Windows, macOS and Linux, with system-tray uploads, drag-and-drop and background uploads. As of 2026 the installers were not code-signed.[7] On Android and iOS, the web app can be added to the home screen.[7]

Business model

[edit]

FileShot uses a freemium model. The free tier includes zero-knowledge encryption, a 10 GB maximum file size, 50 GB of total storage, and files kept for up to 90 days.[2] Paid tiers include:

  • Pro: 100 GB per-file limit and expiry of up to one year.
  • Creator: 300 GB per-file limit, no expiry, API and webhook access, download analytics and custom branding.
  • Professional.

Paid access is available on the Pro, Creator and Professional plans.[2] FileShot also runs a referral programme that pays commission on upgrades, ranging from 30% to 50% depending on the referrer's plan.[2]

See also

[edit]

References

[edit]
  1. 1 2 3 4 5 "About Us". FileShot.io. Retrieved 2026-10-05.
  2. 1 2 3 4 5 6 7 "Pricing". FileShot.io. Retrieved 2026-10-05.
  3. ↑ "FileShot.io". Fazier. Retrieved 2026-10-05.
  4. 1 2 3 4 5 6 7 8 9 "Security Model". FileShot.io. Retrieved 2026-10-05.
  5. ↑ "FileShot/FileShotZKE". GitHub. Retrieved 2026-10-05.
  6. ↑ "Verify Encryption". FileShot.io. Retrieved 2026-10-05.
  7. 1 2 "FileShot Desktop". FileShot.io. Retrieved 2026-10-05.
[edit]

[[:Category:Internet properties established in [FILL IN YEAR]]]

References

[edit]