WebSend

Secure Photo Transfer

Your photos are encrypted end-to-end.
They never pass unencrypted through any server.

📥 Receive Show QR code on this device 📤 Send Scan QR & send photos

About WebSend

A secure, end-to-end encrypted photo transfer app designed for environments where data privacy is paramount. Photos never leave your device unencrypted, and only the intended recipient can decrypt them — no middleman, not even the server, ever has access.

Tech Stack

Frontend: Vanilla HTML, CSS, JavaScript (no frameworks)
Transport: WebRTC peer-to-peer data channels
Encryption: ECDH key exchange + AES-GCM (Web Crypto API)
Signaling: Express.js server (SDP relay only)
QR Codes: qrcode.js / jsQR
TURN Relay: coturn (fallback when direct P2P fails)

Security

Photos are encrypted before leaving your device
The server only relays connection metadata (SDP)
Keys are generated fresh for each session
Fingerprint verification prevents MITM attacks

Credits

Built with Claude Code (AI-assisted development).

Source code on GitHub (AGPLv3)

Third-Party Libraries

qrcode.js v1.5.1 — QR code generation (MIT)
jsQR v1.4.0 — QR code scanning (Apache-2.0)
client-zip — ZIP export (MIT)
scribe.js-ocr v0.10.1 — OCR engine (AGPL-3.0)
Express.js — server-side HTTP framework (MIT)

All client-side libraries are vendored directly in the repository (no CDN at runtime). All licenses are compatible with AGPL-3.0.