FileShot.io — practical zero-knowledge file sharing (client-side AES-256-GCM)
Author: FileShotCreated Mar 3, 2026Updated Mar 6, 2026
FileShot.io is a live example of zero-knowledge architecture in a file sharing context — files are encrypted with AES-256-GCM in the browser before upload, using the Web Crypto API. The server truly never sees plaintext.
Could be useful in the "Encryption" or "Tools" sections as a reference implementation or practical tool:
- Decryption key stored only in the URL fragment, never sent to the server
- No server-side key storage or key derivation
- MIT licensed, self-hostable: https://github.com/FileShot/FileShotZKE
- Link: https://fileshot.io
Source: paragonie/awesome-appsec