Security First: Why NowDrop Needs No Accounts

In an era of endless data breaches, we believe that the most secure data is data that is never stored in the first place. That philosophy is the bedrock of NowDrop’s architecture.

No Accounts, No Passwords

Why doesn't NowDrop require an account? Because we don't want your data.

When you create an account on a traditional file-sharing service, you are entrusting them with your email, your password, and a permanent copy of the files you upload to their cloud.

NowDrop doesn't have a cloud.

End-to-End Encryption

Every file transfer on NowDrop is secured by DTLS (Datagram Transport Layer Security). This is the exact same cryptographic protocol that secures your online banking and HTTPS traffic.

When you pair two devices using a NowDrop PIN code:

1. The devices exchange cryptographic keys directly.
2. The data is encrypted before it leaves your device.
3. It remains encrypted as it travels across the internet.
4. It is only decrypted once it arrives on the receiver's device.

Even if a malicious actor (or even our own signaling servers) intercepted the traffic, all they would see is useless, scrambled noise.

Temporary Signaling

To connect two devices, they briefly need a way to find each other. We use a lightweight signaling server for this. However, this server only holds temporary session IDs and WebRTC offer/answer packets. It never touches your actual files.

Furthermore, all signaling sessions expire after 10 minutes of inactivity, wiping any trace of the connection from memory.

With NowDrop, you are in complete control of your privacy.