How a transfer is sent

when a transfer is sent (file or message), it is encrypted in the senders browser before being uploaded to our servers with hexiosec transfer, transfer files never leave the senders computer unencrypted after encrypting and uploading is complete, the sender is provided with the option of a download link, code, or qr code that they can share with the recipient the sharing link is a single link that contains two parts the location of the uploaded transfer, the decryption key for them the first part is randomly generated, and points to the location of the encrypted files/message on our servers randomly generated means no one could guess the location by just trying links someone with this part of the link could see that there’s a file on the server but couldn’t decrypt the file, including us the second part is the decryption key crucially, no one, including us, can download and decrypt the files without this second part of the link this decryption key is never sent to us only if someone has the full link can they download and decrypt the file, and only before the link expires it is important to make sure the link is only sent to the intended recipient how is it that i can get a sharing link from hexiosec transfer if hexiosec transfer's servers don't hold it? the full sharing link, including the decryption key, is generated and stored locally in the senders browser and never sent to us if the sender is signed in using the same browser and device used to send the files, then they can view the sharing link previously generated by that browser the sharing link information seen by the sender is extracted from local storage on their device, not our servers, and is only available from that specific browser and device if the sender signs into their hexiosec transfer account on a browser or device which is different to the one used to share any files, they will still be able to see all of their active file shares; however, since the local storage of the browser used to originally send the files is not available, the file details, including the sharable link, will be unknown and not available hexiosec transfer will soon support the optional syncing of this local browser storage between the senders devices, which will allow a sender to access the sharing link/codes from any device even in this situation the sharing link will still not be accessible to us can i apply additional controls? with hexiosec transfer additional security controls can be applied when transferring files or messages, or requesting files the measures available depend on the senders account type (see our pricing page for details), such as being able to set the number of times a file can be downloaded, how long the file is retained before it expires, an optional password required to decrypt files verification of the recipient when the file expires, either because of the duration set or the maximum number of downloads is reached, it is automatically deleted from our servers