p/wormhole
Simple, fast, and private file sharing ✨
Feross Aboukhadijeh

Wormhole — Simple, fast, and private file sharing ✨

Featured
199
✨ Wormhole – the fastest way to send files ✨
Wormhole lets you share files with end-to-end encryption and a link that automatically expires.
Send a file in just 2 seconds: https://wormhole.app
Replies
Best
Ethan
Wow, this looks amazing!! How do you plan on making sure that it doesn't go the same way as Firefox Send did? (also, that animation when you upload is sooo cool 😍)
Feross Aboukhadijeh
@booligoosh I think Firefox Send shut down because of abuse. We'll deal with that when it becomes an issue. But we have some ideas. We'll add a "Report" button which allows the reporter to send us the bad files for analysis and ban IPs which continually send reported files. More speculatively, we can include client-side malware scanning and use fancy crypto to attest to the server that the files have passed the scan before we authorize upload. Worst case if it came down to it, we could require an account to send files, but we want to avoid that if we can. End-to-end encrypted messaging apps like Signal manage to fight abuse without access to their user's messages, so we know there must be a way.
Robin
?makers Cool UI/UX and overall a great Product! Is the wormhole graphic/animation open source? If yes, where can I find it :)? If no, can you make it open source :D? it's so brilliant!! All the best and keep up the good work
Feross Aboukhadijeh
🤩 Exciting news! I'm ready to share the project I've been working on for the past 2 months. ✨ Wormhole – the fastest way to send files ✨ Wormhole lets you share files with end-to-end encryption and it's super fast. Our #1 goal was speed – you should be able to get a link to send in less than 2 seconds. Everything is end-to-end encrypted and the server never knows anything about your files. It supports instant streaming (no need to wait for your files to upload to the cloud before you can send the link to your recipient), super fast P2P transfer over local networks, and 24 hour file hosting so the link keeps working even after you close the site. Give it a shot and please tell me what you think! Send a file in 2 seconds: https://wormhole.app Read our manifesto: https://wormhole.app/about Read our security design: https://wormhole.app/security
Jay Holtslander
@feross God I wish this was open source. Been looking for something like this for a while that’s white label.
Feross Aboukhadijeh
@j_holtslander What do you need the whitelabel version for? Send me an email and we can chat
Eugene Hauptmann
Congrats on the launch! @feross - can you add hardware tokens support to facilitate the encryption - if you can ipfs as a storage option, that would be great too!
Steffen Wendt
Can you touch a little bit on privacy and encryption? For example if I send a file to a user....? Looks awessssommmeee by the way 🙏🏻
Feross Aboukhadijeh
@dudehere We have a lot more information about our philosophy here: https://wormhole.app/about and about our security design here: https://wormhole.app/security
Aiman Farooq
This is awesome and I've been looking for something like this since Firefox Send disappeared. One question, is it possible to manually delete files after they've been downloaded or set a download limit?
Feross Aboukhadijeh
@aimanfarooq Right now we don't offer that option, but that's a great suggestion and we'll add it to the list.
Prashant Pillai
@feross This is insane! Love the UX and UI. And the speed is so good. You might want to add milder graphics for the ones with super anxiety levels. 😅
Feross Aboukhadijeh
@iprashantpillai Thank you Prashant! We tried really hard to make the UX and UI something really special! We're working on an option to respect the user's "Prefer reduced motion" operating system setting.
Ferminrp
The product looks great, but I was wondering ... How are you planning on monetizing it?
Feross Aboukhadijeh
@ferminrp We're planning to introduce a Pro plan for sending extremely large files.
Giuseppe
@ferminrp @feross another feature idea for Pro would be extended lifetime for the files (or even custom)
Feross Aboukhadijeh
@ferminrp @giuseppegurgone Great suggestion, we'll add it to the list.
Darren T Jansen
@ferminrp @giuseppegurgone @feross might be good to include white label in the pro plan. This looks like a good solution for a problem that my company is facing.
Feross Aboukhadijeh
@ferminrp @giuseppegurgone @darren_t_jansen Can you send me an email to (my first name AT my first name DOT org) with information about what problem your company is trying to solve? Thanks!
Vas
Congrats on the launch! So the main difference from wetransfer etc. is speed, right? But this is mainly due to instant streaming or not?
Feross Aboukhadijeh
@vasgo Wormhole is faster than other services because it uses peer to peer transfer. That means when you're sending files between two devices on the same network the files don't have to go Up to the cloud and then back down to your recipients device. They can get sent right over your home network. Also, wormhole gives you a link to share to your recipient within a second or two. No need to wait for the file to fully upload to the cloud before you can get a share link to send. Just copy the link and send it, and let the file upload keep going in the background.
Mandeep
@feross slightly confused here (reading https://wormhole.app/security). If the point of this is meant to be trustless (in the sense that you don't have to trust the server), then surely you can just get the secret key using window.location.hash and then decode the contents of the files?
Feross Aboukhadijeh
@mandeep But isn't this true of products like 1Password and LastPass too? Couldn't they just steal your master password when you type it in? I publish open source software that is downloaded 500 million times per month and is used in almost every JavaScript project. If you find any security issues with the design or the implementation, you can report the issue to us and we'll promptly fix it and offer you bug bounty reward.
Mandeep
@feross Hmm... I guess so. I suppose I personally find it hard to wrap my head around secure methods that aim to (effectively) reduce the trust one has to place in the service provider, but suffer from that fatal flaw I mention. The way I see it: with Dropbox, whilst they have the private key, one trusts them not to go around reading people's files casually. IMO the same applies to services like this; one has to trust the operator isn't going to introduce malicious JS. Maybe I just have a weird, minority perspective on this. In any case, the product – and particularly the UI – looks great. I think what I particularly like, compared to Dropbox/GDrive/etc, is not the security aspect but the no-account-necessary, speedy drag-and-drop a file and immediately see the link. It works super fast with no hassle. Wish you the best of luck with the project :)
Feross Aboukhadijeh
@mandeep I totally understand your perspective. Auditing a web app is always a challenging prospect, but I think that what we're aiming to do counts for something. For example, I trust 1Password more than other password management services because they claim to employ end-to-end encryption, even though I can't fully verify that fact when I use their web interface. It's still better than a service that doesn't make any such claim. That said, we want to do more to re-assure users with concerns similar to yours. We're going to open source the cryptography code and explore building other types of client frontends, including potentially a CLI client, so you can be more sure that the code hasn't changed out from under you when using Wormhole. And I totally agree with you re the user interface and no accounts needed. The truth is that, for most people, an app with better security or privacy alone isn't ten times better than an insecure or un-private alternative. Most people just don't understand or care about the details of the apps they use. This may be starting to change, but to make an app that is truly "better" for most people, you need more than just better privacy and security. The app, holistically, needs to be ten times better.
Morgan Lucas
This is SO helpful! So many times I've struggled with where to upload something. I didn't want to send via e-mail; The sizes are often too large, I don't want strangers with my personal e-mail. Saying "Boom, there's a link, you got 24 hrs." is wonderful. What are the limits for the free tier?
Feross Aboukhadijeh
@runtcpip For files up to 5 GB, Wormhole stores your files on our servers for 24 hours. For files larger than 5 GB, Wormhole uses peer-to-peer transfer to send your files directly from your browser to the recipient. So you'll need to keep the page open until the recipient downloads the files.
Atmos Black
E2E encryption + P2P Filesharing = pure awesomeness! I like your manifesto too. How long do files stay online?
Feross Aboukhadijeh
@atmos_black THANKS! We host your files for 24 hours, but we're considering supporting up to a week as an option.
Harsh Gelda
Saw this tool a while ago and saved it to the browser. Tried it for the first time today and I was unable to download the received files through the link. It would be great if you could look into this :(
Feross Aboukhadijeh
@harsh_gelda Did you receive an error? What browser are you using?
Feross Aboukhadijeh
@harsh_gelda Are you sure that you waited until the files were fully uploaded before you closed the tab on the sender side? Also, how large were the files? We don't store files larger than 5GB on our servers – so for those you'll need to keep your browser open on the sender side.
Feross Aboukhadijeh
@harsh_gelda Okay, we're looking into this. Thank you.
Angeline Tan
End user could begin downloading even while we're uploading the file, and a disappearing link - genius!
Angeline Tan
Creators, developers, artists share big files and the fact that Wormhole allows such fast transfers is beyond remarkable.
Feross Aboukhadijeh
@angelinetan Thank you Angeline! Speed was our #1 priority. So we built a service that's as fast as possible, without sacrificing security and privacy of your files. Thanks for your kind words.
Geffrey van der Bos
That was great. Love everything. The privacy focused approach, the copywriting, the fun design. What a pleasant experience. Good luck with all!
Feross Aboukhadijeh
@geffrey Thanks for the kind feedback, Geffrey! Really nice of you!
Emin Deniz
UI is very good, thanks. QR code can be beneficial instead of the only URL, when transferring files between desktop and mobile phone. I am using https://drop.lol/ . I love the easy-to-use functionality. It is not a direct alternative for wormhole, It transfers files directly between clients.
Feross Aboukhadijeh
@emindeniz99 Thanks for the great suggestion to add QR code support. We'll do that in the coming days.
Darren T Jansen
I downloaded the app with Chrome, and for some reason it looks like the app is part of Chrome. (The menu bar has the little extensions puzzle piece.) Is the app a browser app? Or is it standalone? My CPU goes to 100% for a few seconds when I drop files in there, so I guess that's the app encrypting the files locally?
Feross Aboukhadijeh
@darren_t_jansen It's a web app that you can install through Chrome - known as a "progressive web app" or PWA. It should integrate quite nicely with your operating system – should appear when you Control+Tab or Command+Tab (on Mac), and appear in the Start Menu or Dock (on Mac). All files are encrypted locally with a secret that is known only to you. The server has no way of seeing your files.
Leo Herzog
Great work, @feross! Big fan. This is an entirely separate protocol and service from magic-wormhole[1], right? 1. https://github.com/magic-wormhol...
Feross Aboukhadijeh
@xd1936 Yes, this is an independent protocol and implementation. It's much closer in spirit to Firefox Send, if you remember that service.
Benoit Chambon
Like your UI!!! What's your encryption protocol? Check this out @nazim_m
Feross Aboukhadijeh
@nazim_m @benoit_chambon We have a Security page where you can read about the security design. Product Hunt isn't letting me link it, but you just add /security onto our site URL.