# aero.zip - Your files, flying safe. The ultimate file transfer: 250 MB/s speeds, E2E encryption, and instant streaming. Auto-resumes on errors and browser-based. Free for transfers up to 2 GB. ## General ### What is aero.zip? aero.zip is a **high-performance, browser-based file transfer service** with **end-to-end encryption**, designed to move data faster, more reliably, and more securely than traditional cloud storage or email attachments. aero.zip is built to handle massive workflows - like sending entire project directories or raw video footage - without the need to install software or worry about file size limits. * **Instant “Streaming” Transfers:** Unlike other services that force you to wait for the entire upload to complete, aero.zip allows recipients to start downloading immediately. As soon as the first chunk of data leaves your computer, it is available for download, significantly cutting down total transfer time. * **End-to-End Encryption:** Most file transfer services have full access to your files and can see exactly what you are sending. aero.zip guarantees your privacy by design. All encryption happens directly in your browser before files ever touch the internet. Because the decryption key stays on your device, we physically cannot see your files, sell your data, or use it to train AI models. * **Unlimited File Count:** Send complex directory structures containing tens of millions of files without crashing your browser. When uploading, aero.zip's advanced bespoke protocol efficiently groups small files into larger chunks and breaks large files down, allowing you to send virtually unlimited numbers of files in a single link. * **Automatic Resume:** Never worry about a closed laptop ruining a transfer again. Whether your Wi-Fi cuts out or you change networks, the transfer automatically pauses and resumes exactly where it left off once you are back online. * **Unthrottled Transfer Speeds:** While other services cap speeds to save on bandwidth costs, aero.zip is capable of reaching speeds up to 250 MB/s. We use a bespoke protocol and highly optimized servers to saturate your internet connection. Whether you have a standard home connection or enterprise-grade fiber, aero.zip utilizes every bit of available bandwidth to move your data as fast as physically possible. ### How many files can I send in a single upload? The number of individual files you can include in a single upload is **virtually unlimited**. There is a technical limit but it is extremely high - in the tens of millions of files per upload. What really matters is the total size of all files combined, which is determined by your subscription plan. For example, if your plan allows for 100 GB uploads, you could send: * One single 100 GB file. * 100 files of 1 GB each. * 10,000 files of 10 MB each. * 1,000,000 files of 100 KB each. When you start a transfer, we process your files in chunks: * Large files are broken down into smaller, more manageable chunks to ensure a reliable transfer. * Many small files are grouped together into larger chunks. This avoids the performance penalty of handling each tiny file individually. Other file sending services often tend to upload each file individually, which can cause significant slowdowns or even browser crashes when dealing with a large number of files. Our novel chunking approach ensures smooth performance regardless of the file count. ### Can I send directories (folders) instead of individual files? Yes, **you can send directories (folders)** using aero.zip. Our file picker allows you to select entire folders from your computer. When you choose a directory, all its contents, including subfolders and files, are included in the upload. The original folder structure is preserved, so when the recipient downloads the files, they will see the same hierarchy as you had on your device. This feature makes it easy to share complex projects or collections of files without needing to manually select each individual item. ### Can I send files if the recipient is offline? Yes, **you can send files even if the recipient is offline at the time of upload**. aero.zip generates a unique download link as soon as the upload starts. You can share this link with the recipient via email, messaging apps, or any other method you prefer. The recipient can then use the link to download the files whenever they are back online. This flexibility allows you to send files without needing to coordinate timings with the recipient, making it convenient for both parties. ### Do I have to wait for the upload to finish before sharing? One of the standout features of aero.zip is that **recipients can start downloading files immediately**, even while the upload is still in progress. With traditional file transfer services, you often have to wait until the entire upload is complete before you can share the download link. This can be frustrating, especially for large files or when time is of the essence. With our service, as soon as the first chunk of data is uploaded, the recipient can begin downloading that data right away. This streaming approach significantly reduces wait times and allows for a more efficient transfer process. Also, if either the uploader's or recipient's internet connection drops, the transfer will automatically resume from where it left off once the connection is restored. This ensures a smooth and reliable experience for both parties. ### Do I need to keep the page open until the recipient finishes downloading? No, **you do not need to keep the upload page open until the recipient finishes downloading the files**. Once the upload is complete, the files are stored securely on our servers, and the recipient can download them at any time using the provided link. The upload process is independent of your browser session. After you finish the upload and close the page, the files remain accessible to the recipient until they download them or until the upload expires based on your plan's retention policy. ### Does the transfer resume automatically if interrupted? Yes, aero.zip supports **automatic resume** for both uploads and downloads. If the internet connection breaks, or even if you close your laptop, go to some other place, and reopen the laptop again (sometimes connecting to a different network), the upload or download will resume as if nothing has happened. This feature ensures that you don't have to start over from the beginning after an interruption, saving you time and frustration, especially when dealing with large files or unstable internet connections. ### Do I need to install a desktop app to get the full 250 MB/s speed? Yes, aero.zip supports **automatic resume** for both uploads and downloads. If the internet connection breaks, or even if you close your laptop, go to some other place, and reopen the laptop again (sometimes connecting to a different network), the upload or download will resume as if nothing has happened. ### How can I achieve the advertised transfer speeds of up to 250 MB/s? Achieving top transfer speeds depends on a chain of factors, from our servers to your personal computer and internet connection. While our servers are connected to high-capacity links capable of handling these speeds, your setup plays an equally important role. Here's what you need for the best performance: * **Fast computer:** Your computer's CPU performs the encryption and decryption. A modern, powerful CPU will handle this process much faster. Similarly, reading and writing files is limited by your disk speed; a fast SSD (like an NVMe drive) is highly recommended over a traditional hard drive. * **Modern web browser and OS:** The efficiency of encryption and data handling can vary between browsers. For best performance, we recommend using the latest version of a modern browser like Google Chrome or Apple Safari. Your operating system also plays a role in network performance. * **High-speed network connection:** For the most reliable multi-gigabit speeds, a wired Ethernet connection is best. If you're using Wi-Fi, you'll need a modern router and computer that support Wi-Fi 6 (802.11ax) or Wi-Fi 7. * **Quality internet plan:** You need an internet plan from your provider that offers gigabit or multi-gigabit speeds. Be aware that some providers advertise high speeds that are only achievable when connecting to specific services within their own network. Real-world speed to external services like ours can sometimes be lower. **A real-world example:** We've seen speeds of 250 MB/s achieved with a setup like this on a residential connection: * **Computer:** MacBook Pro (14-inch, 2021) with an Apple M1 Max chip and 32 GB of RAM. * **OS:** macOS Tahoe 26.0.1. * **Browser:** Safari 26.0.1. * **Wi-Fi Router:** TP-Link Archer AXE75 (Wi-Fi 6E). * **Connection:** A high-quality multi-gigabit plan from a reputable internet provider. Your geographical location relative to our servers can also impact speed. While we monitor our server load closely to prevent slowdowns, if you have the right hardware and still experience consistently slow speeds, please don't hesitate to [contact us](/support) so we can investigate. ### My internet is slower than 250 MB/s. Is aero.zip still faster for me? Yes. Even if your internet connection doesn't reach our maximum supported speed of 250 MB/s, **you will likely still experience significantly faster transfers compared to other services**. Many file transfer services have internal speed caps or inefficient upload methods that limit transfer rates to around 20–50 MB/s, regardless of how fast your internet is. aero.zip is designed to **saturate your available bandwidth**, whatever that may be. We achieve this through several technical optimizations: * **Persistent Connections:** Unlike some services that constantly open and close connections for different parts of a file, we maintain a stable stream. This eliminates the overhead of repeatedly reconnecting to the server, ensuring a smooth and continuous flow of data. * **Optimized Data Transfer:** We carefully manage how data is packaged and sent. By optimizing the size and structure of data chunks, we reduce wasted bandwidth and processing time, ensuring that more of your connection is used for actual file data rather than protocol overhead. * **Server Tuning:** Our infrastructure is finely tuned for high-throughput performance. We optimize both ingress (incoming) and egress (outgoing) traffic configurations on our servers to handle data as fast as your connection can send or receive it, minimizing bottlenecks on our end. These optimizations mean that even on slower connections, you can expect aero.zip to outperform traditional file transfer methods, making your uploads and downloads quicker and more efficient. ### Can I set a password on an upload? aero.zip does not support setting a password on an upload because **there's no need to**. The security model is designed such that the secret key embedded in the shareable link already provides strong protection. The link you share contains both the upload's identifier and this secret key. Without the full link, the files cannot be decrypted. Therefore, the unique and unguessable upload link itself acts as the password. Adding an additional password would not enhance security, as anyone with access to the link could still download and decrypt the files. Instead, focus on keeping the link private and only sharing it with trusted recipients. ## Security ### How does the end-to-end encryption work? Every upload is protected by a unique secret key that is generated in your browser. This key is embedded directly into the shareable link. Let's look at a sample URL: `https://aero.zip/nawit-notim-xezif-micer-pokal#wiqus-gesur-yizat-tezef-fahul` The link consists of two main parts separated by `#`: * The first part, `nawit-notim-xezif-micer-pokal`, is the public **upload ID**. * The second part, `wiqus-gesur-yizat-tezef-fahul`, is the **secret key**. When a recipient opens the link, their web browser first uses the upload ID to request the encrypted file data from our servers. Then, it uses the secret key (which is only visible to the browser) to decrypt the files directly on their computer. The secret key is never sent to our servers. This ensures that we, the service provider, have no way to decrypt or access your files. Only you and the person you share the link with can access the unencrypted data. ### Why do I need end-to-end encryption? End-to-end encryption is essential for protecting your privacy and ensuring that only you and your intended recipients can access the files you send. With traditional file transfer services, even if they claim to encrypt your files, the service provider often has the ability to decrypt and access your data. This creates a significant privacy risk, as your files could be viewed, analyzed, or shared without your consent. Here are some key reasons why end-to-end encryption is important: * **Privacy:** End-to-end encryption ensures that only you and the person you share the link with can access the unencrypted files. The service provider has no way to decrypt or view your data. * **Security:** By encrypting files in your browser before they are uploaded, end-to-end encryption protects your data from potential breaches or unauthorized access on the server side. * **Control:** You maintain full control over who can access your files. Without the secret key embedded in the link, no one else can decrypt the data. * **Compliance:** For businesses and individuals handling sensitive information, end-to-end encryption helps meet privacy and data protection regulations by ensuring that personal data is not exposed to third parties. By using end-to-end encryption, aero.zip ensures that files are encrypted in your browser before they are uploaded, and the secret key never leaves your device. This means that we, the service provider, have no way to decrypt or access your files. Only you and the person you share the link with can access the unencrypted data. This level of security is crucial in today's digital landscape, where data breaches and unauthorized access are common. End-to-end encryption provides peace of mind, knowing that your sensitive information remains private and secure. ### Don't other file sending services also encrypt files? While many services claim to encrypt your files, the reality is that most only provide _encryption-in-transit_ or, in some cases, _encryption-at-rest_. _Encryption-in-transit_ means that your files are encrypted while they are being sent to the service's servers. However, once the files arrive, the service has the ability to decrypt and access them because they hold the encryption keys. This creates a significant privacy risk, as the service can potentially view, analyze, or share your data. _Encryption-at-rest_ means that the service encrypts your files while they are stored on their servers. Again, since the service manages the encryption keys, they can decrypt and access your files at any time. In contrast, aero.zip employs **end-to-end encryption** (in addition to encryption-in-transit and encryption-at-rest), where files are encrypted in your browser before they are uploaded, and the secret key never leaves your device. This ensures that only you and the person you share the link with can access the files, providing a much higher level of privacy and security. ### What encryption algorithm and parameters are used? aero.zip employs robust and modern encryption algorithms to ensure the security and privacy of your files. The primary encryption standard we use is **AES-GCM-256**, complemented by **PBKDF2** (SHA-256 hash algorithm with 600,000 iterations) for key derivation. In addition to these algorithms, we implement best practices such as using random initialization vectors (IVs) for each encryption operation and employing secure key management techniques. This ensures that even if two files are identical, their encrypted forms will be different. Encryption and decryption are performed directly in your web browser using the Web Crypto API, which is a standard and secure method for handling cryptographic operations in web applications. The randomly generated encryption keys never leave your device, and we only store the encrypted data on our servers. This design guarantees that only you and your intended recipients can access the unencrypted files. ### Do you scan files for viruses? Because of our **end-to-end encryption**, we cannot see the contents of your files, which means **we physically cannot scan them for viruses or malware**. We believe this is the right trade-off. For a service to scan your files, it must be able to decrypt and read them. This means the provider can also view your personal photos, read your confidential documents, and analyze your data. We prioritize your privacy above all else. It is also worth noting that server-side scanning is never 100% effective. Competitors who claim to scan for viruses cannot catch every new threat, and relying on them can create a false sense of security. The best defense against malware is to maintain **robust security measures on your own device**, such as keeping your operating system and software up to date, and/or using reputable local antivirus software, and practicing safe browsing habits. This protects you not just from files downloaded here, but from threats across the entire internet. ### If files are encrypted, how can I download a selection as a single ZIP archive? Downloading multiple files as a ZIP archive is possible because the **entire process of creating said archive happens securely within your web browser**, without our servers ever seeing your unencrypted data. Here's how it works: 1. When you select more than one file to download, your browser sends a request to our server for the encrypted data of those files. 2. Using the secret key from the URL, your browser decrypts the data on your device. 3. As the data is decrypted, your browser simultaneously constructs the ZIP archive “on the fly” in your browser and streams it directly to the browser's download manager. 4. You receive a single ZIP archive containing all the selected files, ready to use. This entire operation - fetching, decrypting, and zipping - is handled locally on your machine, and at no point is the unencrypted content of your files or the final ZIP archive exposed to the server. ### If uploads are encrypted with a secret key, how can I see the in my account? When you upload files while logged into your account, the process is still based on end-to-end encryption. Here's how it works: * Your browser generates a unique secret key for the upload, just like with anonymous uploads. * This secret key is then encrypted using a _data encryption key_ (DEK) that is specific to your account. * The DEK itself is encrypted with your account password before being stored on our servers. * The encrypted upload data, along with the encrypted secret key, is stored on our servers. When you log back into your account, your browser retrieves the encrypted DEK and uses your password to decrypt it locally. With the decrypted DEK, your browser can then decrypt the secret keys for each of your uploads, allowing you to access and manage them. ### If my password is never sent to the server, how can you log me in and verify it? This is a crucial aspect of our end-to-end encryption architecture. Your sensitive account data, such as the secret keys for your past uploads, is encrypted with a main _data encryption key_ (DEK). This key, in turn, is encrypted with your password. For us to verify your password during login without ever seeing it, we use a modern cryptographic protocol called **OPAQUE**. Here's a simplified explanation of how it works: * When you log in, your browser and our server engage in a cryptographic handshake. Through a series of exchanges, our server can verify that you know the correct password without you ever sending the password to us. * Once the server confirms your password is correct, it sends your encrypted DEK to your browser. * Your browser, which is the only place that knows your actual password, can then decrypt this key. * With the decrypted DEK, your browser can finally access all your other encrypted account information, like your upload history. Thanks to the OPAQUE protocol, your password never leaves your device in a readable form. We can authenticate you without ever having the ability to see your password or decrypt your personal data. This provides a much stronger level of security than traditional password systems. ### What happens if I lose the upload URL? Can you recover it for me? Due to our end-to-end encryption model, we do not store or have access to the secret keys embedded in your upload URLs. This means that if you lose the upload URL, there is no way for us to recover it or retrieve your files. Therefore, we advise you to **upload files while logged into your account** whenever possible. This way, your uploads are linked to your account, and you can manage them through your account dashboard. ## Privacy ### Why can't I send the download link via email directly from aero.zip? We **intentionally don't offer a feature to email links directly from our servers** in order to protect your privacy. This decision is fundamental to our end-to-end encryption promise. If we were to send an email on your behalf, our server would need to know the full shareable link, which includes the secret key for decryption. This would mean we, the service provider, would have the ability to access your files, breaking the core principle of end-to-end encryption. Instead, we empower you to share the link securely yourself. We provide convenient shortcuts that use your operating system's native sharing capabilities. This allows you to paste the link directly into your own email client, WhatsApp, or any other messaging app, ensuring the secret key never passes through our servers. ### Do you track me with cookies or other third-party tools? Yes, we use analytics tools to help us understand how our website is being used and to improve the user experience. However, we take your privacy very seriously. **No personally identifiable information (PII) is collected** during this process. We are interested in aggregate usage patterns, not individual surveillance. We also **do not use cookies for tracking**. This is why you don't see a cookie consent banner on our website. Also, the tracking data doesn't get joined with data from other websites or services to build a profile about you. Crucially, **extra care has been taken to ensure that no sensitive information is ever revealed** to our analytics providers. Specifically: * The "secret key" portion of the upload URL is stripped out before any page view data is recorded. * Your passwords, file contents, and personal upload history ("My Uploads") are never tracked. Furthermore, all analytics data is stored securely on servers located within the European Union (EU), adhering to strict data protection standards. ### Where is my data hosted? As of today, our data is hosted in data centers located in **Germany**, a member of the European Union. We chose this location due to its strong data protection laws and robust infrastructure. We're working on expanding our infrastructure to include additional regions worldwide. This will help improve performance for users in different geographical locations and provide more options for data residency in the future. ### When does my data get deleted? The retention period for your uploaded data **depends on your subscription plan.** After the upload expires, it might take us up to 30 days to completely delete all traces of the data from our backup systems. This delay is necessary to ensure data integrity and allow for recovery in case of accidental deletions. ### Where is the company based? The company behind aero.zip is based in **Lithuania**, a member of the European Union. We chose Lithuania for its favorable business environment, strict data protection regulations, and strong commitment to digital innovation. ## Subscriptions ### Why don't you offer a “lifetime” plan? You might have seen other services offer “lifetime deals,” which can seem very attractive. However, we've made a conscious decision not to offer them because we believe they are an unsustainable and often misleading business practice. Running a service like aero.zip involves continuous costs, including server hosting, bandwidth, maintenance, and ongoing development. A one-time payment simply cannot cover these recurring expenses indefinitely. Services that offer lifetime plans often face a difficult choice down the road: * They might shut down completely, leaving customers with nothing. * They might degrade the quality of the service to cut costs. * They might engage in a “bait-and-switch” by introducing new, essential features that are not included in the original “lifetime” plan, forcing users to pay again. In either case, **customers end up losing out**. We want to avoid these pitfalls by adopting a subscription model that ensures the long-term viability of our service. ### Where can I find my invoices? We partner with Stripe, a secure and trusted payment processor, to manage all our billing. You can easily access your invoices through a self-service customer portal provided by Stripe. To get there, go to your account page and **navigate to _Subscription_ → _Go to Stripe Portal_** . ### What is your refund policy? We want you to be completely satisfied with aero.zip. If you find that our service does not meet your expectations, we offer a **30-day money-back guarantee** on all new subscriptions. If you decide to cancel your subscription within the first 30 days, simply [contact us](/support), and we will process a full refund for you. No questions asked. While we don't require a reason for your cancellation, we always appreciate any feedback you can provide. It helps us improve our service for all users. Please note that this refund policy applies only to new subscriptions. If you renew or upgrade your plan, those payments are non-refundable. ### Do you offer custom plans for businesses? Yes, we do offer custom plans for businesses and organizations with specific needs. If you're interested in a tailored solution, please [contact us](/support). When you contact us, please provide some details about your requirements, such as the expected volume of data transfers, number of users, and any special features or compliance needs you may have. This information will help us propose a plan that best fits your organization's needs. ## Account ### Why do I need a password if I sign up with Google or Apple? Even when using Google or Apple to sign up, you must choose a password because it is vital for our end-to-end encryption. Your **password is used to encrypt your account's data encryption key** (DEK), which protects your private data (like the secret keys for your uploads). Neither Google nor Apple provides us with a secret that we could use for this purpose. Furthermore, if we relied on a key provided by them, it would mean that Google or Apple would technically have the ability to decrypt your data. By using your own password, we ensure that only you hold the key to your information. ### Can I log in using a passkey instead of a password? Yes, **if said passkey supports the PRF (Pseudo-Random Function) feature**, you can use it to log in without needing to enter your password. When you log in with a passkey that supports PRF, the passkey itself securely generates the necessary cryptographic keys on your device. This allows your browser to derive the required encryption keys to access your account data without ever transmitting your password. At the time of writing, passkey providers that seem to support PRF are: * iCloud Keychain (Apple devices) * Google Password Manager (Android and Chrome) * Windows Hello (Windows devices) Most hardware security keys (like YubiKeys) also support PRF, allowing for passwordless logins. If your passkey does not support PRF, you will still need to enter your password to log in, as the password is required to decrypt your account's encryption keys. ### What is a recovery key and how does it work? A recovery key is a special set of 21 words that acts as a **backup method to regain access to your account if you forget your password** or lose access to your login-compatible passkeys. Here's a sample recovery key: `cradle private combine render two rather caught zone capital race guide hen sock girl open man page stay smooth humor modify` When you create an account, your browser generates this recovery key and prompts you to save it securely. The recovery key is used to encrypt your account's main data encryption key (DEK), which in turn encrypts all your other sensitive account information. If you ever need to use the recovery key, you can enter it on the login page. Your browser will use it to decrypt your account's DEK, allowing you to regain access to your account without needing your original password. ### What types of two-factor authentication (2FA) are supported? Two-factor authentication (2FA) adds an extra layer of security to your account. We support two modern and secure methods: * **TOTP (Time-based One-Time Password):** This is the familiar six-digit code that changes every 30 seconds, generated by an authenticator app like Google Authenticator, Microsoft Authenticator, or a password manager. * **Passkeys:** A modern and highly secure replacement for passwords. Passkeys allow you to sign in using the same biometrics (fingerprint or face scan) or device PIN you use to unlock your computer or phone. Some passkey providers, such as iCloud Keychain, Google Password Manager, and Windows Hello, support an advanced feature called PRF (Pseudo-Random Function). Also, most hardware security keys (like YubiKeys) support PRF. If your passkey supports PRF, you can use it to log in without needing your password at all. The passkey itself securely generates the necessary encryption keys on your device, offering a seamless and even more secure login experience. ### How do I use backup codes for two-factor authentication (2FA)? Backup codes are a set of one-time-use codes that you can use to **access your account if you lose access to your primary two-factor authentication (2FA) method**, such as your authenticator app or passkey. When you enable 2FA on your account, we provide you with a set of backup codes. It's crucial to store these codes in a safe and secure location, such as a password manager or a physical safe, because they are the only way to regain access to your account if you can't use your regular 2FA method. Each backup code can only be used once. After using a backup code to log in, it becomes invalid. If you ever run out of backup codes, you can generate a new set from your account settings. This will invalidate any unused codes from the previous set, so make sure to store the new codes securely. ### How do I enable dark mode? By default, aero.zip automatically adapts to your system's theme preference. If your operating system is set to dark mode, our web app will also display in dark mode. To manually toggle dark mode, you can use the **theme toggle located at the bottom of every page**. This allows you to switch between light and dark modes at any time, regardless of your system settings. ### How can I get personal data you have about me? For starters, we don't store any personal data beyond what is necessary to manage your account (like your email address for login purposes). Additionally, since we use end-to-end encryption, we don't have access to the content of your uploads. If you choose to purchase a subscription, we retain minimal billing information as required by law, such as your name, email address, and payment history. This data is stored securely and is only used for account management and billing purposes. To request a copy of the personal data we have about you, please go to your account page and **navigate to _Account_ → _Personal Data_** . We will respond to your request within 30 days, as required by GDPR regulations. ### How can I permanently delete my account and data? We're sorry to see you go! To permanently delete your account and all associated data, please go to your account page and **navigate to _Account_ → _Delete Account_** . Upon confirming the deletion, your account and all related data will be permanently removed from our systems. This action is irreversible, so please make sure you have backed up any important information before proceeding. Please note that for operational and legal reasons, your data may take up to 30 days to be fully deleted from all our backup systems. Your encrypted uploads will not be accessible during this period.