Skip to content
Post-quantum encrypted

Designed to forget.

Everything you share disappears the moment you're done. No accounts. No traces. No compromises.

Drop a file to begin
Or click Send Files / Send Folder
End-to-end encrypted
No file size limit
Zero knowledge
Scroll
Philosophy

The best file transfer is the one that leaves no trace.

We built Tallow with a singular conviction: your data should exist only as long as you need it to. No servers store your files. No logs record your activity. The moment your transfer completes, everything is gone — as if it never happened.

Post-Quantum Encryption
ML-KEM-1024 key exchange with X25519 hybrid mode. Protected against both classical and quantum attacks. NIST Security Level 5.
FIPS 203
Zero Knowledge
The relay never sees your data. Only you and your recipient can decrypt. Nothing stored to disk — ever.
E2E Encrypted
No Account Required
Just open and transfer. No registration, no login, no personal data collected. Nothing to remember.
Zero Sign-Up
Browser-Based
Works everywhere with a modern browser. No installs, no extensions, no plugins. Just a link.
No Downloads
Built with Rust
Memory-safe, constant-time cryptography compiled to WebAssembly. No undefined behavior. No shortcuts.
Rust + WASM
Chunked Streaming
Files are split into encrypted chunks and streamed directly. No waiting for a full upload. No file size limits.
Streaming
Cryptography

Post-quantum, by default.

Every byte is encrypted with algorithms designed to resist quantum computers. Not as an option — as the only way.

Key Exchange
ML-KEM-1024
FIPS 203 · NIST Security Level 5
Post-quantum lattice-based key encapsulation mechanism. Paired with X25519 for hybrid classical/quantum resistance.
Hybrid KEM
Encryption
AES-256-GCM
NIST SP 800-38D · 256-bit keys
Hardware-accelerated authenticated encryption. Counter-based nonces ensure unique ciphertext for every chunk.
Authenticated
Integrity
BLAKE3
RFC Draft · Merkle tree verification
Parallelizable cryptographic hash for file integrity. Merkle tree structure enables efficient verification of large files.
Parallelizable
Key Derivation
Argon2id
RFC 9106 · Memory-hard
Memory-hard password hashing resistant to GPU and ASIC attacks. Combined with HKDF-SHA256 for key derivation.
GPU-Resistant
Compare

How Tallow differs.

A direct comparison with conventional file transfer services.

Feature Tallow WeTransfer Dropbox
End-to-end encryption
Post-quantum crypto
No account required
Zero data retention
No file size limit
Implementation

Memory-safe by construction.

Built entirely in Rust and compiled to WebAssembly. Every cryptographic operation is constant-time. Every memory allocation is safe. The entire client runs in your browser — the server is a dumb relay that never sees plaintext.

NIST 5
Security category
Rust
Memory-safe language
WASM
Compilation target
Zero
Data retained
// Hybrid key exchange
let (kem_ct, kem_ss) = ml_kem_1024::encapsulate(&pk);
let (x_ct, x_ss) = x25519::ephemeral(&remote_pk);

// Combine shared secrets
let ikm = [kem_ss, x_ss];
let key = hkdf_sha256(&ikm, salt, info);

// Encrypt with AES-256-GCM
let nonce = counter_nonce(chunk_index);
let ciphertext = aes_256_gcm::encrypt(
  &key, &nonce, &plaintext, aad
);

// Verify integrity
let hash = blake3::hash(&ciphertext);

Just drop a file.

No account. No upload. No waiting. Your file is encrypted in your browser and disappears after delivery.

Start a transfer
No sign-up required. Works in any modern browser.