Where client-side encrypted file transfer helps
Client-side encrypted file transfer matters when the file is sensitive enough that "just email it" feels wrong. ZipPigeon keeps the handoff focused: one package, the right recipient, and a clear access window.
Specific workflow
Use this page for buyers comparing XChaCha20-Poly1305 client-side file encryption with HTTPS and storage encryption at rest; v3 account delivery separately protects payload keys with hybrid X-Wing recipient envelopes.
What happens to the file
The browser encrypts file chunks with XChaCha20-Poly1305 before upload. ZipPigeon stores ciphertext and coordinates recipient access, expiration, revocation, and audit events without needing ordinary readable file contents.
- Encrypt before upload
- Invite an account recipient or create a secure link
- Set expiration and download limits where configured
- Review transfer status
Common sends
Teams use it for log delivery, customer export transfer, diligence file exchange, private client delivery and similar files where a broad folder permission is more access than the job needs.
What still remains visible
The service still processes operational metadata: account and recipient details, timestamps, file size, transfer status, download counts, and audit events. That boundary is part of the security model, not fine print.