ShiftTools ShiftTools
Zero-Upload Browser Utility

ShiftDrop P2P Share

Transfer large files directly between devices over peer-to-peer WebRTC DataChannels and open zero-knowledge AES-256-GCM encrypted ephemeral chat rooms.

Interactive Tool Workspace

Loading local in-browser WebAssembly engine & hardware cryptographic sandbox...

Email attachments cap out at 25 MB, cloud drives make you wait for a full upload before the other person can even start downloading, and messaging apps compress your photos and videos. ShiftDrop establishes a direct, encrypted peer-to-peer WebRTC DataChannel between two browsers - whether across the room from an iPhone to a Windows PC or across the globe - streaming files chunk-by-chunk directly from sender RAM to receiver disk alongside optional AES-256-GCM ephemeral group chat with zero cloud file storage.

When direct browser-to-browser streaming beats uploading to a cloud drive

Traditional file sharing is a two-hop relay: first you upload a 2 GB video to a remote server, and then your colleague downloads that 2 GB video from the server - using twice the bandwidth, twice the time, and eating into your cloud storage quota.

Peer-to-peer WebRTC cuts out the middleman storage server completely:

  • Cross-platform AirDrop between iPhone, Android, Windows, and Linux: Scanning a 6-character room code or QR code on your phone to beam original, uncompressed camera videos or .apk / .msixbundle installers straight to your Windows or Linux desktop over Wi-Fi.
  • Sending multi-gigabyte video cuts or .zip archives: Streaming large project folders directly from your browser to a client's browser in real time - as soon as you start sending Chunk #1, the recipient is already receiving Chunk #1.
  • Sharing sensitive files that must never sit in a cloud bucket: Because the file bytes flow strictly while both browser tabs are open and connected, there is no forgotten S3 link or Google Drive folder sitting on a server six months later.
  • Ephemeral encrypted war-rooms and quick credential handoffs: Opening a disposable room with client-side AES-256-GCM encrypted chat where messages exist only in active memory and vanish the moment the room closes.

How to transfer files or open an encrypted P2P room step by step

Method 1: Direct Peer-to-Peer File Transfer via 6-Character Room Code or QR Scan

  1. Generate a session on the sending device: Open ShiftDrop in your desktop or mobile browser. The workspace automatically initializes a unique 6-character Room Code (e.g., K9M-4T2) alongside a scannable QR Code.
  2. Pair the receiving device: On your second device (phone, tablet, or colleague's laptop), either point the camera at the QR code on screen or type the 6-character Room Code into the Join Room input box and click Connect.
  3. Confirm the direct DTLS handshake: Wait about one second for the status badge to turn green (Connected · P2P Encrypted), confirming a direct WebRTC RTCDataChannel is open between the two browsers.
  4. Drop and stream files live: Drag one or multiple files of any size into the transfer dropzone. Bytes immediately begin streaming in flow-controlled 64 KB chunks from sender RAM to receiver disk—keep both browser tabs open until the progress bar reaches 100% and the file saves to your Downloads folder.

Method 2: Multi-Peer Ephemeral Encrypted War-Room & Zero-Knowledge Chat

  1. Switch to the Ephemeral Chat / Room tab: Create a room and share the 6-character code or room link with your teammates.
  2. Verify client-side key derivation: As peers join, session keys are derived locally via Web Crypto (AES-256-GCM) so relay signaling servers never see plaintext payloads.
  3. Exchange credentials, code snippets, and files: Type messages, paste multi-line configuration snippets, or drop attachments into the shared stream. Every message is encrypted with a fresh 96-bit initialization vector (IV) before leaving your browser.
  4. Close the tab to wipe session memory: When the handoff or incident review finishes, simply close the browser tab—all volatile RAM buffers and ephemeral chat logs vanish immediately with zero cloud persistence.

How the WebRTC P2P and zero-knowledge encryption architecture works

Direct WebRTC RTCDataChannel with DTLS 1.3 encryption

Every WebRTC DataChannel is mandatorily encrypted in transit at the transport layer using DTLS (Datagram Transport Layer Security). When both devices are on the same Wi-Fi or LAN subnet, ICE host candidates negotiate a direct local network path - meaning your files travel across your local router at blazing LAN speeds (20–80+ MB/s) without even going out to the wider internet!

Backpressure-controlled chunk streaming (bufferedAmountLowThreshold)

Naive WebRTC scripts try to push an entire 1 GB file into the browser's RTCDataChannel.send() buffer at once, overflowing the SCTP queue and crashing the tab. ShiftDrop slices files into 64 KB binary chunks and monitors channel.bufferedAmount, pausing and resuming seamlessly so memory usage stays flat regardless of file size.

Zero-knowledge AES-256-GCM ephemeral chat

In the chat mode, encryption keys are derived client-side via Web Crypto (PBKDF2 / HKDF → AES-256-GCM) so message payloads are encrypted with a unique 96-bit initialization vector (IV) before transmission.

A real example: transferring a 1.4 GB 4K ProRes video from an iPhone to a Windows PC

Suppose you shot a 1.4 GB (1,433.6 MB) .mov video on an iPhone and need it on a Windows editing workstation on the same office Wi-Fi - without iCloud sync delays or hunting for a Lightning/USB-C cable.

  1. Open ShiftDrop on your Windows PC. The screen displays Room Code K9M-4T2 and a live QR code.
  2. Point your iPhone camera at the QR code on the monitor and tap the link - both devices connect over a local WebRTC DataChannel in 0.8 seconds.
  3. Select the 1.4 GB .mov file from your iPhone Photos/Files sheet.
  4. Because both devices are on the same 5 GHz Wi-Fi network, the WebRTC ICE agent selects the direct LAN host candidate pair (192.168.1.42 <-> 192.168.1.18) and streams at ~42 MB/s.
  5. In 34 seconds (1,433.6 MB ÷ 42 MB/s), the full uncompressed .mov file lands in your Windows Downloads folder with zero cloud upload time and zero quality loss.

Practical tips and limitations

  • Both browser tabs must remain open during the transfer: Because ShiftDrop does not upload your file to a cloud storage server, the sender's browser is streaming the bytes live to the receiver's browser. Do not close or lock the phone screen until the progress bar hits 100%.
  • Strict corporate symmetric NATs / UDP firewalls: WebRTC establishes direct peer-to-peer connections on home networks, mobile hotspots, and most office Wi-Fi networks using STUN discovery. On locked-down corporate networks that block all outbound UDP ports, switching one device to a mobile hotspot or standard Wi-Fi resolves connection blocks.

Privacy and network handling transparency

ShiftDrop uses a lightweight signaling channel solely to exchange the initial WebRTC SDP offer/answer and ICE network candidates so the two browsers can find each other. Your transferred files are never uploaded to or stored on any server - file bytes travel strictly peer-to-peer over the encrypted RTCDataChannel between the connected browsers.

Related tools

Need to share a file with someone asynchronously via a short link instead? Use Custom URL Shortener for web links, compress large video clips first with Local Video Compressor, or generate strong room passphrases with Password Generator. Read our guides on how to share large files without the cloud and free encrypted group chat with no account.

Frequently Asked Questions

Are my files stored on a cloud server when I use ShiftDrop?

No. ShiftDrop does not have a file storage server. When you drop a file, your browser reads the file in small 64 KB chunks and streams those bytes directly to the recipient's browser over an encrypted peer-to-peer WebRTC DataChannel.

What happens if I close my browser tab before the other person finishes downloading?

Because the file is streaming live directly from your device to theirs without an intermediate cloud copy, closing the sender's browser tab interrupts the stream. Keep both devices' browser tabs open until the transfer reaches 100%.

Is there a file size limit like the 25 MB email attachment limit?

There is no artificial server upload limit because no server stores the file. You can stream files hundreds of megabytes or several gigabytes in size, limited only by the receiving browser's available download storage space.

Does ShiftDrop use my internet data if both devices are on the same Wi-Fi network?

When both devices are connected to the same local Wi-Fi or Ethernet router (and client isolation is not enabled on the router), WebRTC automatically routes the traffic directly across your local network (LAN) at maximum local Wi-Fi speed without consuming your ISP's external data cap.

Do I need to create an account or install an app on my phone or PC?

No account, login, or native app installation is required on any platform. It runs inside standard mobile and desktop browsers (Chrome, Safari, Firefox, Edge, Brave).

How is the ephemeral chat encrypted?

All WebRTC traffic is encrypted in transit with DTLS, and the ephemeral chat layer uses client-side Web Crypto (AES-256-GCM) with zero server-side message persistence - once everyone leaves the room, the conversation is gone permanently.