Files go straight from one device to the other (peer-to-peer WebRTC). They are never uploaded anywhere.
Two layers of encryption. WebRTC’s built-in DTLS, plus Ferry’s own AES-256-GCM with brand-new keys for every connection (forward secrecy). Any tampered, dropped or replayed byte kills the connection.
The pairing code is the lock. It is single-use, random (95 bits) and never leaves your devices. A public relay (ntfy.sh) passes a few encrypted setup messages between them; without the code it can’t read, forge or redirect anything.
Security code. If both screens show the same six digits, nobody is in the middle.
Nothing is stored. Closing this page destroys all keys and any received file you haven’t saved.
QR codes: lean-qr © David Evans (MIT) · jsQR © Cosmo Wolfe & Jefff Nelson (Apache-2.0)