Is EasySend safe to use?

EasySend is built with security as a core design principle. When you enable encryption, your files are encrypted entirely in your browser using AES-256-GCM before they are uploaded to the server. The encryption key is derived from your password using PBKDF2 with 100,000 iterations. The key never leaves your device and is never transmitted to the server.

Zero-Knowledge Architecture

Zero-knowledge means that EasySend cannot read, access or decrypt your encrypted files. The server stores only the encrypted ciphertext. Even if the server were compromised, an attacker would only obtain encrypted data that is computationally infeasible to decrypt without the password. This is the strongest form of protection a file sharing service can offer.

HTTPS and Transport Security

All connections to EasySend use HTTPS with TLS 1.3. This encrypts data in transit between your browser and the server. Even without end-to-end encryption enabled, your files are protected during upload and download by transport-layer encryption. HSTS headers ensure browsers always connect over HTTPS.

No File Scanning or Data Mining

EasySend does not scan, index or analyze your files. There is no content moderation AI running over your uploads. There are no advertising trackers embedded in the download pages. EasySend does not sell data to third parties. The business model is simple: free tier with paid upgrades for more storage and longer retention.

Password Protection

You can add an access password to any upload. Recipients must enter the password before they can view or download the files. This adds an additional layer of access control on top of encryption. For maximum security, share the link through one channel (such as email) and the password through a different channel (such as a text message).

Automatic Expiry

Free uploads are automatically deleted after 3 days. This prevents forgotten files from sitting on servers indefinitely, reducing the window of exposure. Files are permanently deleted with no recovery option, ensuring that sensitive data does not persist beyond the intended sharing period.