agniwar asks the receiver to approve a request before file bytes are sent. Transfers use an encrypted WebRTC data channel, typically directly between browsers. If a relay is configured, encrypted traffic can pass through it.
Check the person, not just the name
Device names are temporary and generated automatically. Sharing a public network address does not prove that two devices belong to the same person or even the same Wi-Fi. Before sharing sensitive material, confirm the intended recipient and their displayed device name through a separate trusted channel.
Review incoming files
Decline unexpected requests. Check file names and sizes before accepting, and scan or otherwise verify unfamiliar files before opening them. A matching SHA-256 digest detects accidental corruption in the transferred bytes, but it does not prove a file is safe or authenticate its sender.
Understand the service boundary
The signaling service coordinates discovery and connection setup; it can see network and connection metadata. It does not store file contents. Signaling is not independently authenticated end-to-end against a compromised signaling service. Use a trusted network and keep your browser updated.
After saving
Confirm the downloaded file opens correctly and keep backups when needed. Browser-stored copies can remain in Received files until removed, cleared or evicted. A separately saved file remains on your device when its history entry is removed. See our privacy policy for details.