Self-hosted, single-file PHP app for one-time E2EE file sharing. Files are encrypted client-side with AES-256-GCM (PBKDF2 × 200k rounds) before upload - the server never sees plaintext. Auto-deletes on first download or after 30 minutes. Zero dependencies, zero database.
php privacy rate-limiting self-hosted pbkdf2 file-transfer e2ee zero-knowledge end-to-end-encryption zero-trust aes-256-gcm self-destructing client-side-encryption secure-file-sharing web-crypto-api single-file-app file-expiry one-time-download encrypted-transfer ephemeral-files
-
Updated
Feb 20, 2026 - PHP