Share files.
Simply & Securely.
Upload your files. Generate an unguessable expiring link with optional password protection. Direct Cloudflare R2 streaming without the clutter.
Drag & drop files or folders
Files are securely encrypted and stored with Cloudflare R2 presigned URLs. Up to available quota.
Streamlined Workflow
How NearDrop Works
No convoluted dashboards or bloated folder hierarchies. Just seamless, three-step file sharing.
Upload Your Files
Drag and drop any file or entire folder. High-speed streaming uploads directly to Cloudflare R2 without memory bloat.
Configure Security & Link
Set automatic link expiration (1h to 30d), set download limits, and optionally add SHA-256 password protection.
Share Instantly
Copy your unguessable secure link or generate a mobile QR code. Recipients download directly through temporary presigned URLs.
Engineered for Speed & Privacy
Everything You Need to Share
Engineered with strict security standards, lightweight architecture, and frictionless user experience.
Blazing Fast Uploads
Direct-to-storage presigned upload URLs bypass intermediary web servers for maximum throughput and zero bandwidth throttling.
Cryptographic Share Tokens
Random 12-character high-entropy tokens prevent guessing or crawling. Each download is protected by temporary signed URLs.
Automatic Link Expiration
Set links to vanish after 1 hour, 24 hours, or custom duration. Scheduled cleanup guarantees files do not linger forever.
SHA-256 Password Lock
Protect sensitive transfers with optional passwords. Stored using client-verified SHA-256 hashes—never plaintext.
Cloudflare R2 Storage
Built on distributed S3-compatible cloud storage with global edge replication, zero egress fees, and 99.999999999% durability.
Complete File Management
Inspect checksum hashes, rename files, view real-time download counters, revoke active links in 1-click, and track transfer history.
Built on Defense in Depth
NearDrop keeps security straightforward, auditable, and reliable from browser to cloud storage.
Row Level Security (RLS)
PostgreSQL enforces granular tenant isolation at the database layer. No user can view, query, or delete another user's file records.
Temporary Signed URLs
Private R2 buckets are completely isolated from public internet. File downloads are granted through signed URLs that expire within minutes.
High-Entropy Token URLs
Share links use 12-character cryptographically random tokens, making brute-force enumeration practically impossible.
Zero-Knowledge Password Hashing
Protected shares verify access using client-generated SHA-256 digests. Raw passwords are never transmitted or stored in the database.
Automated Lifespan Cleanup
Scheduled backend cleanup routines invalidate expired tokens and purge stale storage objects automatically.
Strict Egress Restrictions
Direct browser-to-R2 streaming eliminates intermediary server buffering and reduces risk of memory-based data exfiltration.
Architecture at a Glance
Authenticates via Supabase Auth. Requests presigned upload or download authorization.
Validates user identity, verifies quota limits, generates token, and manages metadata.
Receives encrypted payload directly via signed S3 URLs. Direct streaming for recipient download.
Product Preview
Designed for Simplicity & Focus
Take a look inside the NearDrop workspace. Clean layouts, instant feedback, and zero clutter.
124
2.4 GB
18
426
Frequently Asked Questions
Everything You Need to Know