WARP GATE

warpgate.fysh.site  /  the only official instance

A portal for your data.
Keep your privacy.
Connect p2p.

For

Direct encrypted links. Send a file, a password, a photo, a sentence. We don't third wheel. We're just the matchmaker.

  • no account
  • no upload
  • nothing stored
  • runs in the browser

How it works

Three steps, and the server sees none of it.

The server introduces the browsers to each other and then gets out of the way. Your files never touch it.

Open a gate

You get a code and a QR. The secret in it is generated in your browser and is never sent to the server.

The other device joins

Scan or paste. Each pair of browsers agrees a key directly with each other, and adds a room password if you set one.

Burn it

Keys, messages and the room are gone. What is left is whatever the two of you chose to save.

Paying for it

Nothing but our own code.

An ad network needs its JavaScript on the page, and on a page that holds your decryption key that script could read it. No promise in a privacy policy changes what code is able to do, so we changed what the code can reach: the gate is a separate document with its own policy that permits no outside origin at all. This page, the one you are reading, may carry a sponsor. Pressing "Open a gate" leaves it behind, and nothing from here follows you in.

What we charge for
  • A licence for closed products. Warp Gate is AGPL. If a company wants it inside something they do not publish the source of, they buy an exception.
  • Running it for you. Your own gate on your own domain, kept patched, for teams who want one and do not want to operate it.
  • Relay, when a direct link is impossible. Some corporate and mobile networks refuse to let two devices meet. Bandwidth through us costs real money, so that part is paid.
What stays free, permanently
  • Every feature that exists today, with no limit added later
  • No cap on gate size, file size, or how many you open
  • No account, ever. There is nothing to sign up for and nothing to sign in to
  • No third-party script, tracker, pixel or analytics on any page that touches your data, enforced by the browser rather than promised

Features we have

Everything below is built and live.

This list used to be a roadmap. It is not one any more: every item on it shipped. What replaces it is the box at the end, which is where the next one comes from.

Live

More than two people

A gate is a small full mesh. Every pair runs its own connection and its own keys, so nobody relays anybody else's traffic. Capped deliberately: the number of connections grows with the square of the group.

Live

Survive a phone reload on a password gate

A refresh no longer drops you out. The stretched password key is held for the tab, so the page comes back into the same gate without asking again.

Live

Resume a big transfer

A dropped connection costs the chunks that were in flight, not the file. The receiver says which chunks it holds and the sender sends only those.

Live

Install it, and share into it

A PWA with a share target: hold a photo in the gallery, share to Warp Gate, and the gate opens with it already attached.

Live

Scan a code with the camera

The phone can now read the laptop's QR as well as show its own. The frames are decoded on the device and thrown away; the camera is only ever open while the scanner is.

Live

Say the same two words

Two words derived from the live key, beside the five digits. Read them out. If both screens agree, nobody is sitting in the middle.

Live

Something to do while you wait

Chess, connect four, tic tac toe and battleships, played over the same encrypted channel as everything else. The moves are not sent to a server, and in battleships not even to the other player: each device only ever knows where its own ships are.

Live

Works when both of you are behind the same router

The awkward case that breaks most tools. It was broken here too, and is fixed.

Live

A browser extension, if you want one

It carries the client inside the package, so the server can't hand you modified code. Download the zip, unpack it, and load the folder: it isn't in a store, and you don't need it to use the site.

Live

Run your own

One container, no build step, no dependencies. The trust question is who serves the page, so self-hosting is the honest answer to it.

The pledge

Free forever, and that's a promise.

Every feature that exists today stays free, permanently. Nothing that works now will later need a subscription. We charge companies for commercial use and for the things that cost us bandwidth, and if that ever stops covering the bill, the site gets smaller before it gets paywalled.

Keeping it free

No accounts, and nothing to buy. Supported by the people for the people.

Warp Gate keeps nothing and sells nothing. If it saved you some trouble, any of these keeps the lights on. The source is public either way.

Ko-fi Buy me a coffee. One off, no account needed. GitHub Read it, star it, host your own. AGPL-3.0.
Monero XMR 8Ahxk91aBHfCgLmqUji5NQXVHg9Y6pAj1EpdnsZvm5Nf4M4D9Uam6hr4FXZoBhNuZoKMH9V31pYZF6fkyf4pvK6q4pCmynj
Bitcoin BTC bc1qkgq5xpue5se32xu53s4nuvn866u4xgpl0xs27t

Always check a crypto address on your own screen before sending. Those transfers cannot be reversed.