File Transfer
Magic Wormhole
Send a file or snippet directly with a one-time code.
Magic Wormhole offers a privacy-conscious alternative in the file transfer space, with a stronger focus on data protection than many mainstream tools.
Who is this for?
✓ Good for you if:
- • Quick one-off transfers without creating an account
- • Developers and power users comfortable with a CLI
- • Sending secrets between your own devices
- • Low-trust scenarios where nothing should be stored server-side
⚠ Think twice if:
- • You want a point-and-click GUI for sharing
- • You need link-based sharing that works after you go offline
- • Your network blocks outbound connections or custom ports
- • You plan to share very large files on slow connections
Overview
Magic Wormhole is a secure file transfer tool that uses a simple passphrase-based protocol to establish encrypted connections between two computers. The tool generates a short, memorable passphrase that users share out-of-band (verbally, via messaging, etc.), and both parties use this passphrase to establish a direct, encrypted connection. Magic Wormhole uses PAKE (Password-Authenticated Key Exchange) to securely establish encryption keys from the shared passphrase, ensuring that even if the passphrase is intercepted, the connection remains secure. The tool works across different operating systems and networks, automatically handling NAT traversal and firewall issues. Magic Wormhole is command-line based, making it lightweight and suitable for technical users. The software is open source (MIT License) and can transfer files, directories, and even text messages. It's particularly useful for secure file transfers where users want to avoid cloud storage and maintain direct control over the transfer process.
Privacy highlight
Secure file transfer using PAKE . Direct peer-to-peer connection with no central server. Complete privacy through ephemeral passphrase-based protocol.
Quick facts
- Country:
- Decentralized (open source)
- Pricing:
- Free
- Platform:
- Desktop, Mobile
- Technical:
- Intermediate
- :
- Yes
- :
- No telemetry
- :
- Yes
- Open-source status:
- Fully open source
- :
- No
- :
- No
Key features
- Secure way to send files directly.
Security & encryption Click to expand
- Yes
- Encryption protocols
- PAKE, NaCl, ,
- Magic Wormhole uses PAKE (Password-Authenticated Key Exchange) to establish keys from a shared passphrase. The passphrase is used to derive keys through a secure key exchange protocol, ensuring that even if the passphrase is intercepted, the connection remains secure. keys are generated ephemerally for each transfer session and are never stored. The tool uses NaCl ( and Library) for operations. Magic Wormhole does not require pre-shared keys or certificates - all security is derived from the shared passphrase.
- Offline support
- No
Telemetry & tracking Click to expand
- No telemetry
- No
- Ip no
- Magic Wormhole does not collect data. The tool operates as a command-line application with no or code. All file transfers happen directly between two computers using the Magic Wormhole protocol. The tool does not track users, collect usage statistics, or monitor file transfers. Magic Wormhole provides complete privacy through its direct peer-to-peer architecture.
Jurisdiction & compliance Click to expand
- Magic Wormhole is open-source software with no central jurisdiction. The tool operates entirely peer-to-peer with no central server, so there is no data residency concern. Files are transferred directly between two computers and never stored on servers.
- Magic Wormhole does not retain any data. The tool operates entirely peer-to-peer with no central server, so there is no data storage or retention. Files are transferred directly between two computers and are never stored on any server. Magic Wormhole does not have access to file contents, file names, or user information. The tool provides complete privacy through its direct connection architecture.
- Legal frameworks
- List applicable frameworks once confirmed (e.g., GDPR, CCPA, LGPD).
- Revenue sources
- Donations
Editorial signals Click to expand
- 88
- Trust score
- 90
- Trust breakdown (0–10)
- Encryption: 95, Audits: 80, Open source: 95, Telemetry: 100, Jurisdiction: 100, Transparency: 90, Trackers: 100
- Editorial notes
- Usability: 70, Performance: 85, Family friendly: 75
User experience Click to expand
- Signup requirements
- none
- Onboarding difficulty (1-5)
- 3
- Accessibility features
- Web-based interface with keyboard navigation and screen reader support
Backup & portability Click to expand
- No
- Migration tools
- Describe CLI, export/import, and migration flows after review.
- Explain key and account recovery models after research.
Similar privacy apps
Same categoryOnionShare
Score 91OnionShare offers a privacy-conscious alternative in the file transfer space, with a stronger focus on data protectio...