END-TO-END ENCRYPTED FILE TRANSFER

Any two devices.
One passphrase.

Files encrypt before they leave your machine and stream peer-to-peer. The relay pairs the two ends and never sees anything but ciphertext. Terminal or browser, either side.

Send a file → Leave it in the mailbox
RECEIVE · GOT A PASSPHRASE?
RELAY ONLINE VERSION - LICENSE MIT SOURCE Sanyam-G/Airpipe
airpipe SENDER 
$ 
     _   _     ___  _
   /_\ (_)_ _| _ \(_)_ __  ___
  / _ \| | '_|  _/| | '_ \/ -_)
 /_/ \_\_|_| |_| |_| .__/\___|
                   |_|   send
  demo.zip  4.2 MB
  ╔══════════════════════════════════════╗
  ║      MAPLE RIVER COMET PILOT 42      ║
  ╚══════════════════════════════════════╝
  Or run: airpipe download MAPLE RIVER COMET PILOT 42
  Waiting for receiver...
  ✓ Receiver joined
  [░░░░░░░░░░░░░░░░░░░░░░░░]   0%
  ✓ Sent demo.zip  direct · WebRTC
airpipe.sanyamgarg.com/live
SEND LIVE
MAPLE RIVER COMET PILOT 42
Waiting for receiver…
✓ Receiver joined · sending demo.zip · 4.2 MB
0%
✓ Sent demo.zip · direct · WebRTC
airpipe RECEIVER 
$ 
     _   _     ___  _
   /_\ (_)_ _| _ \(_)_ __  ___
  / _ \| | '_|  _/| | '_ \/ -_)
 /_/ \_\_|_| |_| |_| .__/\___|
                   |_|   download
  Passphrase: MAPLE RIVER COMET PILOT 42
  Destination: .
  Looking up...
  No mailbox transfer; opening direct connection...
  [░░░░░░░░░░░░░░░░░░░░░░░░]   0%
  ✓ Saved: ./demo.zip  4.2 MB
airpipe.sanyamgarg.com/d/…
RECEIVE
MAPLE RIVER COMET PILOT 42
Looking up…
No mailbox transfer; opening direct connection…
0%
✓ Saved demo.zip · 4.2 MB

Both sides, live. Flip either side between CLI and WEB. Every pairing works.

The sender runs airpipe send and the receiver types the passphrase. Both swap an encrypted offer and answer through the relay, then the file streams directly over WebRTC, encrypted end to end. The relay never gets the key; if direct fails, it forwards ciphertext only.
01

Encrypt

NaCl secretbox, in your browser or the CLI. The key is derived on each device from the passphrase, or carried in the URL fragment, which browsers never send to the server.

02

Pair

Scan the QR in the terminal, type four words on this page, or open the link. Both ends derive the same key independently.

03

Stream

WebRTC punches through NAT and streams device to device. If a firewall blocks it, chunks fall back through the relay, still ciphertext.

SELF-HOST

Run your own relay.

One command boots a relay you fully control. Point the CLI at it with AIRPIPE_RELAY.

Size cap, expiry, and rate limit are env-configurable. /health and /metrics are built in, and the pages pick up your limits automatically.

MIT · github.com/Sanyam-G/Airpipe

docker run -p 8080:8080 ghcr.io/sanyam-g/airpipe-relayCopy
curl -sSL https://airpipe.sanyamgarg.com/install.sh | shCopy
export AIRPIPE_RELAY=https://relay.example.comCopy

Roadmap

  • nextReceiver-side accept prompt
  • nextResume interrupted transfers
  • soonTURN relay for tricky networks
  • laterLAN device auto-discovery
  • laterPer-relay storage caps

Full roadmap →

Recent releases

Loading…

Full changelog →