🔐
TLS 1.2+
Encrypted Connections
All peer-to-peer communication uses TLS 1.2+ with per-session certificates. File data, names, and metadata are never sent in cleartext.
🔢
Pairing Code
Verified Pairing
Each connection generates a unique 6-digit verification code. Both users confirm the code matches before any transfer begins, preventing man-in-the-middle attacks.
🔏
SHA-256
Integrity Verification
Every file includes a SHA-256 hash computed before sending. The receiver verifies the hash on completion. Corrupted or tampered files are rejected automatically.
🛡️
Path Sandbox
File System Safety
Received file paths are sanitized to prevent directory traversal attacks. Files are written to a temporary .part file and atomically renamed, so crashes never leave partial files.
📡
Anti-Spoofing
Discovery Protection
Peer discovery uses rotating tokens and IP verification. Rogue devices cannot impersonate legitimate peers or forcibly remove them from your device list.
⚖️
Resource Limits
DoS Resistant
Message sizes are capped at 1MB, connections limited to 10 per instance, and you can set a maximum accepted file size. Prevents memory exhaustion and disk flooding attacks.