Encrypted file transfer services: what to verify
A score out of 100 cannot establish the security of a transfer. Start with the documents and key ownership, then check whether the recipient can use the service safely. The previous scores and measured-speed claims are omitted because their supporting records are unavailable.
Updated on
Published by HexaTransfer, a service operated by Gaprod — Groupe Dwenola SAS. These guides discuss our own service alongside other products. About the publisher
A score out of 100 cannot establish the security of a transfer. Start with the documents and key ownership, then check whether the recipient can use the service safely. The previous scores and measured-speed claims are omitted because their supporting records are unavailable.
How to choose
| Question | Check before sending |
|---|---|
| One delivery or ongoing work? | Temporary link for a finished delivery; shared storage for repeated editing. |
| Who can obtain the key? | Distinguish browser encryption from encryption performed by the storage provider. |
| What happens at expiry? | Confirm the deadline and keep an independent original; expiry does not remove copies already downloaded. |
To compare encryption, trace the file and key separately. TLS encrypts the network connection but terminates at the server. Encryption at rest protects stored data under the provider's key management. End-to-end encryption encrypts before upload and decrypts at the intended recipient; the provider should not receive the decryption key.
Infomaniak describes SwissTransfer encryption in transit and on its storage servers. That description does not establish a browser-generated key hidden from the provider. HexaTransfer uses browser-side AES-256-GCM with a key in the share link fragment. Do not attribute one service's implementation to another.
HexaTransfer in practice
HexaTransfer is a free, account-free tool for occasional deliveries up to 50 GB. Links expire after 14 days by default; choose 1–30 whole days when creating the transfer; keep your own copy. Files and their names are encrypted in the browser with AES-256-GCM. The browser generates a random key and puts it after # in the share link. Send the complete link only to intended recipients: anyone holding it can decrypt the transfer, subject to any additional password protection.
The optional password controls access at the server; it does not derive the encryption key. Keep the tab open until the link appears, and allow enough disk space when downloading. Uploading does not remove the original file.
Sources checked on 2026-09-27
Related guides
Send large files securely with end-to-end encryption
Send up to 50 GiB free with end-to-end encryption, no account or email. Choose 1–30 days; 14 days by default.
Send a file