How encrypted QR sharing links work
QR Mode packages the share location and a randomly generated decryption key into one link. It is useful when you want to open a share on another device without typing a password.
Create and scan a QR share
- Open file sharing or note sharing and choose your content.
- Enable QR Mode. Reiven generates a random 256-bit key in the browser instead of asking you to choose a password.
- Encrypt and upload. Keep the resulting QR code visible only to the intended recipient.
- Scan the code on the receiving device. The browser uses the included key to decrypt; a file download starts, or a note appears in the page.
Your device may require you to approve opening the link or saving a download. If scanning is unavailable, the complete QR link can be copied instead.
Why the link is itself a secret
The key is stored in the URL fragment, the part after #. Browsers do not include this fragment in ordinary HTTP requests to the server. The download page reads it locally.
That separation does not make the full link safe to publish. Anyone who obtains it can decrypt while the share exists. Browser history, copied messages, screenshots, and software that reads links can expose it. Avoid posting QR links to public channels or showing the code on a public screen.
Choose QR Mode or a separate password
QR Mode is convenient for a nearby device or an intended recipient you can give the full link to. Manual password mode lets you send the link and password separately. Both rely on the recipient's device and browser being trustworthy.
Expiration and deletion are the same in either mode: up to 24 hours, with earlier loss possible on a server restart. Receiver deletion is enabled by default. Learn more about the storage model and encryption boundaries.