TOTEM
TOTEMDropAvailable · v1.0.0Send big files. Encrypted before they leave your device. Received in any browser.
The app cuts a file into 8 MB pieces, encrypts each one on your computer, and uploads only ciphertext. The key travels inside the link, after the #, which browsers never send to any server — so nothing on our side, or on the storage, can read what you sent. The receiver opens the link, and the page checks every piece before it touches their disk.
macOS 11 or later, or Windows 10 and 11 (64-bit). Notarized by Apple on the Mac, signed by Oceanic Consulting VOF on Windows. Updates itself from totemdrop.com, and every update is signed. Receiving needs no app: any totemdrop.com link opens in a normal browser.
What makes it different
Zero knowledge, by construction
File names, sizes and contents are sealed with the link key. Our servers hold ciphertext and an opaque id — nothing to leak, nothing to hand over.
Checked piece by piece
Every 8 MB piece is authenticated and bound to its position. A piece that was altered, swapped or cut is refused, not repaired, and nothing forged reaches the disk.
Resumes where it stopped
Every piece is independent. Close the laptop mid-transfer and continue tomorrow; nothing already sent is sent again.
Straight to the storage
Uploads and downloads go directly between you and the storage in Germany through short-lived signed addresses. The TOTEMDrop service never carries file bytes.
Made for hard networks
Built by the TOTEMVPN team. If the storage is blocked where you are, the link opens inside TOTEMSurf's tunnel.
Expires, or you revoke
Links live 7 days, 30 with Plus. Revoke any time — the ciphertext is deleted immediately, not just hidden.
What it deliberately does not do
A page that lists only strengths is a page nobody can check.
It cannot: the content is unreadable to us. Abuse is handled by revocation and rate limits, not by looking inside.
Whoever has the whole link can open the file. Send it over a channel you trust, and use the optional password for anything sensitive.
That is deliberate: nothing to install, nothing to trust beyond the page you can read.
At a glance
- Sender
- macOS 11+ (one universal app) and Windows 10/11 · v1.0.0
- Receiver
- Any modern browser at totemdrop.com
- Encryption
- XChaCha20-Poly1305 per piece, key only in the link
- Limits
- Free: 2 GB per link, 7 days · Plus: 50 GB, 30 days
- Storage
- Object storage in Germany (EU), ciphertext only
Questions
Do I need an account?
To receive, never. To send, no — the free tier works without one. Plus (bigger files, longer retention) uses your TOTEMVPN account.
Can you recover a file if I lose the link?
No. The key exists only in the link. That is the point.
Which platforms does the sender app run on?
macOS 11 and later, one app for Apple silicon and Intel, and Windows 10 and 11 (64-bit). Both are on the download page. Receiving works in any browser, on any device.
Why does the receiver download inside the page, not with a download manager?
The key is in the link after the #, and browsers never send it anywhere. Only the page can decrypt the pieces, so a download manager would only ever see ciphertext. Downloading inside the page is what keeps the file unreadable to everyone else.