SecretDrop
Encrypts .env files, API keys and configs in the browser and shares them via password-protected links or direct transfers
The product is an encrypted file sharing service that encrypts .env files, API keys and configuration files in the browser before upload and shares them via password-protected links or direct transfers, addressing insecure sharing over chat and email without expiry or audit trail. It is for developers, IT and operations teams in businesses and for individual users who need to exchange secrets with contractors and team members. It is positioned as a zero-knowledge alternative where the server stores only encrypted blobs and verification hashes, using AES-256-GCM with PBKDF2 key derivation.
Key features
- Client-side AES-256-GCM encryption
- PBKDF2 with 600K iterations
- Password-protected links
- Configurable expiry up to 90 days
- Download limits and access locking
- Multi-file bundles in one link
- Create files by pasting content
- Encrypted file names and metadata
- Access event tracking and analytics
- Automatic deletion after TTL
- End-to-end encrypted direct transfers