TOTEMDropIn development · receiving works today

Send big files. Encrypted before they leave your device. Received in any browser.

The app cuts a file into 8 MB pieces, encrypts each one on your computer, and uploads only ciphertext. The key travels inside the link, after the #, which browsers never send to any server — so nothing on our side, or on the storage, can read what you sent. The receiver opens the link, and the page checks every piece before it touches their disk.

Sender app — coming soon macOS and Windows

The sender app for macOS and Windows is in development. Receiving already works: any totemdrop.com link opens in a normal browser, with no install and no account.

Up to 50 GBNo account to receiveResumesEU storage

What makes it different

Zero knowledge, by construction

File names, sizes and contents are sealed with the link key. Our servers hold ciphertext and an opaque id — nothing to leak, nothing to hand over.

Checked piece by piece

Every 8 MB piece is authenticated and bound to its position. A piece that was altered, swapped or cut is refused, not repaired, and nothing forged reaches the disk.

Resumes where it stopped

Every piece is independent. Close the laptop mid-transfer and continue tomorrow; nothing already sent is sent again.

Straight to the storage

Uploads and downloads go directly between you and the storage in Germany through short-lived signed addresses. The TOTEMDrop service never carries file bytes.

Made for hard networks

Built by the TOTEMVPN team. If the storage is blocked where you are, the link opens inside TOTEMSurf's tunnel.

Expires, or you revoke

Links live 7 days, 30 with Plus. Revoke any time — the ciphertext is deleted immediately, not just hidden.

What it deliberately does not do

A page that lists only strengths is a page nobody can check.

It does not scan what you send.

It cannot: the content is unreadable to us. Abuse is handled by revocation and rate limits, not by looking inside.

The link is the key.

Whoever has the whole link can open the file. Send it over a channel you trust, and use the optional password for anything sensitive.

Receivers get a browser page, not an app.

That is deliberate: nothing to install, nothing to trust beyond the page you can read.

At a glance

Sender: macOS and Windows app · in development
Receiver: Any modern browser at totemdrop.com
Encryption: XChaCha20-Poly1305 per piece, key only in the link
Limits: Free: 2 GB per link, 7 days · Plus: 50 GB, 30 days
Storage: Object storage in Germany (EU), ciphertext only

Questions

Do I need an account?

To receive, never. To send, no — the free tier works without one. Plus (bigger files, longer retention) uses your TOTEMVPN account.

Can you recover a file if I lose the link?

No. The key exists only in the link. That is the point.

Is the sender app available yet?

Not yet. The engine, the service and the receiver page are live; the desktop app is being built on the same pipeline as TOTEMSurf.