Ferry

Ferry and the alternatives

There are a lot of ways to move a file from one device to another. Most of them are fine. This page is about which one fits which situation — including the ones where Ferry is not the answer.

Side by side

Platforms, account requirement, where the file ends up and how it is encrypted, for eight ways of moving a file between devices.
RouteWorks onAccountWhere the file ends upEncryption
FerryAny browser: Windows, macOS, Linux, Android, iOSNoneNothing stored; direct browser to browserEnd to end, AES-256-GCM, verifiable by four words
AirDropApple devices onlyApple ID for some settingsNothing stored; direct device to deviceYes, within Apple's system
Quick Share / Nearby ShareAndroid, ChromeOS, WindowsGoogle account for some modesNothing stored; direct device to deviceYes, within Google's system
Snapdrop / PairDropAny browserNoneNothing stored; direct browser to browserYes, over WebRTC
WeTransfer and similarAny browserOptional or required, by tierUploaded to their servers, kept for daysIn transit and at rest, on their keys
Cloud storage linkAny browserRequiredHeld on their disks until you delete itIn transit and at rest, on their keys
Messaging appsWhere the app runsRequired, usually a phone numberIn chat history on both devices and often their serversEnd to end in Signal and WhatsApp
Emailing it to yourselfAnywhereRequiredOn the mail servers at both ends, indefinitelyIn transit only, in practice

Products change. Treat this as a description of how each approach works rather than a specification of any one service, and check the current terms of anything you are relying on.

Against AirDrop and Quick Share

Both are excellent inside the world they were built for. AirDrop between two Apple devices is faster than Ferry, is built into the share sheet, and needs no browser. Quick Share does the same for Android, ChromeOS and Windows.

The problem they share is the edge of that world. AirDrop will not talk to a Windows laptop; Quick Share will not talk to an iPhone. Ferry only asks for a browser on each end, so the two operating systems never have to agree on anything — and it works between devices that are nowhere near each other, which neither of those can do at all.

Against Snapdrop and PairDrop

These are the closest relatives: open-source, browser-based, peer-to-peer over WebRTC, no account. If they work for you, they are a good choice, and PairDrop in particular is actively maintained.

Ferry differs in how the two sides find each other and what that buys. Those tools show you the other devices on your local network and you pick one. Ferry pairs on a ten-character code instead, so the two devices do not have to be on the same network, and the key agreement is salted with that code — which is what lets both screens show four words you can compare to prove nobody is in the middle. Ferry also treats the relay as hostile by design: it is given a hash of the code rather than the code, and even the WebRTC handshake is encrypted before it is handed over, so the relay never learns your local network addresses.

Against WeTransfer and cloud storage links

Upload-and-share services are the right tool for sending something to other people, especially several of them, especially something large. They will carry files far past 250 MB, the link keeps working after you close your laptop, and the recipient needs nothing but a browser and patience.

The trade is that your file is on somebody else’s disk, held under their keys and their retention policy, and the link is the secret — anyone who ends up with it has the file. For moving something between two devices you already own, that is a long way round with a copy left at the end of it.

Against messaging apps and email

Signal and WhatsApp are end-to-end encrypted and perfectly reasonable for sending a file to a person. Used on yourself, they leave the thing sitting in a chat history on both devices, which is the opposite of what you want for a password or a recovery code. Email is worse: it lands on at least two mail servers and stays there until you go and delete it from both.

When Ferry is the wrong choice

Ferry is built for one narrow job, so it is worth being clear about where it does not fit.

  • Files over 250 MB. A single transfer is capped there. Use a service built for large files, or split it.
  • Sending to someone who is not with you. Both sides have to be at their device at the same time, and you need a way to get the code across. There is no inbox and no link that still works tomorrow.
  • Anything you need to keep. Nothing is stored, on purpose. Ferry is a crossing, not a folder.
  • Many recipients. A room holds exactly two devices.
  • Browsers without WebCrypto or WebRTC. Rare, but some locked-down corporate builds and very old browsers qualify.

When Ferry is the right one

Two devices, one of them yours, something you would rather not leave a copy of: a password out of a manager and onto a phone, a document onto a machine you do not own, a photo off a phone at local network speed, a config snippet between a work laptop and a personal one. No account to make, nothing installed, nothing left behind.

Open Ferry and try a crossing — or read how it works first.