Passphrase vs Link: A Safer Way to Hand Over a File
3 min read · Updated 2026-09-12
Most file sharing ends with a long URL pasted into a chat. It works, but a link is awkward to say out loud, easy to forward by accident, and often lives forever. Droploder hands over a few random words instead.
Why words work better than a link
You can read a passphrase down the phone, write it on a sticky note, or type it on a phone keyboard without a single typo. A 90-character URL fails all three tests.
A passphrase is also separable from the message: you can discuss the documents in email and hand over the words in person, so no single channel contains both the context and the key.
And because a multi-word passphrase is drawn from a large vocabulary, the number of possible combinations makes guessing your way into somebody else's transfer impractical.
Why not a short numeric code?
Droploder originally used a six-digit code. Short codes are friendly, but a million combinations is not many when the guessing is automated.
Words give you far more entropy for the same amount of human effort — arguably less effort, since words are easier to remember for the thirty seconds you need them.
Every passphrase is generated randomly per transfer and is never reused while an existing transfer still holds it.
Sharing a passphrase sensibly
Treat the passphrase exactly as you would treat the file itself. Anyone who has it can download the batch until it expires.
For sensitive documents, use a different channel for the passphrase than for the conversation about the files.
The words are worthless soon after the handoff anyway: a guest transfer is single-use, and a free account lets you shorten the retention window on top of that.
If a passphrase ends up somewhere it should not, revoke or regenerate it from My Transfers.