SECURITY Honest cryptography, plainly explained.
AirBridge uses AES-256-GCM, the same authenticated symmetric cipher that secures
TLS and disk encryption. Every file and message is encrypted on the sending device with a shared
LAN key and decrypted on the receiver with the same key. That key never leaves your devices.
Pick the mode that fits your threat model in Settings → Encryption:
- AES single key — one shared key for the LAN. Zero configuration. Same key on
every device that should be able to read your traffic. The default — works out of the box.
- AES dynamic key — a fresh random key for every file, shipped through a shared
folder. A leaked master key never exposes past transfers. Trust anchor moves from "has the
installer" to "has access to your share".
Each installer ships with a bundled LAN key so first-time setup is one click. The moment you want
tighter control, paste your own key in Settings, and every device on your LAN that also knows that
key can talk to you. The ones that do not, cannot.
We do not run a cloud. There is nothing to subpoena, nothing to leak, nothing to breach on our end,
because there is no "our end." Your files live on your devices. Period.