pCloud Transfer Alternative with Better Privacy
Looking for a pCloud Transfer alternative? Compare privacy policies, encryption methods, and features to find a more secure file sharing option.
The strongest privacy-focused alternatives to pCloud Transfer are HexaTransfer (French, 10 GB, free, client-side E2EE), SwissTransfer (Swiss, 50 GB, free), and Tresorit Send (Swiss, 5 GB free). pCloud Transfer itself shut down its free no-account service in 2023, pushing users to the paid pCloud storage product with encryption as an add-on. For anyone wanting pCloud's original simple "email a file" experience with stronger privacy, a client-side encrypted service with EU hosting and no account requirement is the natural replacement.
What pCloud Transfer Was and What Changed
pCloud Transfer (transfer.pcloud.com) let users send files up to 5 GB via email with no account for years. It was popular for its simplicity — type recipient email, drop file, send. The service was discontinued in late 2023 as pCloud restructured around its main paid product. Existing users were redirected to pCloud's regular sharing, which requires a pCloud account.
Privacy-wise, pCloud Transfer used TLS 1.2/1.3 in transit and AES-256 at rest, but keys were held by pCloud. The pCloud Crypto add-on ($4.99/month) offers client-side encryption on the main storage product, but it never applied to the free transfer service. For users who picked pCloud Transfer precisely because it was free and account-free, the shutdown left a gap.
HexaTransfer: The Closest Spiritual Successor
HexaTransfer replicates pCloud Transfer's core workflow: go to the site, upload a file up to 10 GB (double pCloud's 5 GB), get a link, share it. No account. The difference is genuine end-to-end encryption: files are encrypted in-browser with AES-256-GCM before upload, and the decryption key lives in the URL fragment that the server never sees.
French hosting keeps the data under GDPR and French data protection law. PBKDF2 key derivation with 600,000 iterations on optional passwords brings it into modern KDF territory. Files expire after 7 days, matching the ephemeral-transfer use case.
SwissTransfer: Larger Files, Swiss Hosting
SwissTransfer, operated by Infomaniak, allows 50 GB per transfer — the most generous free tier in the market. No account required. Swiss hosting on Infomaniak's renewable-powered data centers. Files expire between 1 and 30 days (sender's choice), with optional password protection.
The encryption is AES-256 at rest with keys held by Infomaniak, not client-side zero-knowledge. For non-sensitive large files (wedding videos, research datasets, raw photo archives), the 50 GB limit is the killer feature. For strictly sensitive content, a zero-knowledge service is a better match.
Smash: French With Unlimited Size on Paid
Smash, the Paris-based service, offers free transfers up to 2 GB with no account. Paid plans ($5+/month) unlock unlimited file size and customizable expiration (1–30 days). Hosting on OVH in Roubaix and Gravelines, France — no US involvement.
Smash uses TLS 1.3 and AES-256 at rest, not client-side E2EE. The UX is polished, with branded links and download tracking on paid tiers. For creative professionals who regularly send 20 GB project folders, Smash's paid tier is a common choice.
Tresorit Send: Zero-Knowledge Swiss Transfer
Tresorit Send (send.tresorit.com) works without a Tresorit account. 5 GB per transfer free, up to 20 GB on paid Tresorit plans. Client-side AES-256 encryption with keys derived from the random URL fragment. Optional password adds a PBKDF2-wrapped layer.
Swiss company, data centers in Ireland and Switzerland. Strong GDPR posture and ISO 27001 certification. The 5 GB free cap is smaller than HexaTransfer's 10 GB or SwissTransfer's 50 GB, but the feature depth (download tracking, link revocation) is greater.
Firefox Send Forks and Open-Source Options
Firefox Send was discontinued in September 2020 after abuse reports, but its open-source code lives on in self-hosted projects like send.vis.ee and various Docker forks. These offer client-side encryption with expiration and download counters.
Self-hosting is only practical if you have infrastructure and are comfortable with ops. For individuals, the hosted privacy-focused services (HexaTransfer, SwissTransfer, Tresorit Send) offer the Firefox Send experience without the maintenance burden. For teams with strict data sovereignty rules, a self-hosted fork on owned infrastructure is legitimate.
Comparison Table
| Service | Free Size | Max Size | Encryption | Hosting | Account Free | |---------|-----------|----------|------------|---------|--------------| | pCloud Transfer | Discontinued | N/A | N/A | N/A | N/A | | HexaTransfer | 10 GB | 10 GB | E2EE client-side | France | Yes | | SwissTransfer | 50 GB | 50 GB | AES-256 at rest | Switzerland | Yes | | Smash Free | 2 GB | 2 GB | AES-256 at rest | France | Yes | | Smash Paid | Unlimited | Unlimited | AES-256 at rest | France | Yes (for recipients) | | Tresorit Send | 5 GB | 20 GB | E2EE client-side | Ireland, Switzerland | Yes |
What Privacy Means in This Context
A "better privacy" alternative to pCloud Transfer comes down to three dimensions. First, jurisdiction: EU or Swiss hosting generally provides stronger privacy law protections than US-based services. Second, encryption model: zero-knowledge (server can't read files) is strictly better than server-managed keys. Third, account minimization: no account means no profile, no login history, no data to subpoena about your usage patterns.
HexaTransfer scores well on all three — French hosting, zero-knowledge AES-256-GCM, no accounts. SwissTransfer is strong on hosting and account-free but not zero-knowledge. Tresorit Send is zero-knowledge and EU/Swiss hosted but requires more setup for regular use.
Migration From pCloud Transfer Habits
If you were a regular pCloud Transfer user, the migration path is minimal. Bookmark a new service and carry on — the upload-share-delete workflow is identical across all the alternatives. The only adjustment is the email integration: pCloud Transfer let you enter the recipient's email in the upload flow, and the service emailed the link for you. Most alternatives give you the link to share yourself, via whatever channel you prefer.
If you want the emailed-link convenience, Smash and SwissTransfer both offer it. HexaTransfer currently shows the link for you to copy, which some users actually prefer (more explicit about what gets sent where).
Encryption Verification for the Paranoid
For client-side encryption claims, open browser developer tools during upload and watch the network tab. In a genuine zero-knowledge service, you'll see the outgoing payload is ciphertext (random-looking binary) rather than your original file bytes. You can also inspect the URL: if the decryption key is in the fragment (after #), browsers don't send it to servers.
HexaTransfer passes both checks. The source code of the web client is available for inspection (open the page source or the bundled JS). For security-conscious users, this kind of verification is more meaningful than marketing claims about "bank-grade encryption."
Try it at hexatransfer.com — free, no account, 10 GB max.
Send large files securely with end-to-end encryption
Transfer files up to 10 GB for free with end-to-end encryption. No account required. Your files are encrypted in your browser before upload — no one else can read them.
Send a file