Built for instant, private sharing.
Shareli was created with one goal: make sharing text, code, voice notes, and files as fast and secure as possible — without requiring an account, email, or any personal information.
Our Mission
In a world where data privacy is increasingly threatened, moving information from one device to another should not leave a permanent digital footprint. Shareli is designed around this principle — your data belongs only to you, and once it's gone, it's truly gone.
We built Shareli for developers, students, professionals, and anyone who needs to quickly transfer information across devices without the friction of logging in or the risk of leaving data on someone else's servers.
How the Encryption Works
Shareli uses the WebCrypto API (AES-GCM 256-bit encryption) built directly into your browser. When you send a message, it is encrypted on your device before it is transmitted. The encryption key lives only in the room URL — our server never sees it and never stores your message content.
This means even if someone intercepted the data on our server, they would only see encrypted gibberish. Only people with your room link can decrypt and read the messages.
Security Architecture
Cipher: AES-GCM 256-bit encryption via the native browser WebCrypto API (window.crypto.subtle). Each message gets a unique random 12-byte Initialization Vector (IV), ensuring identical plaintext produces different ciphertext every time.
Key Derivation for Password Rooms: PBKDF2 with SHA-256 and 100,000 iterations. The salt is derived from the room ID, making brute-force attacks computationally expensive.
Key Distribution: The encryption key lives exclusively in the URL hash fragment (#key=...). Per HTTP standard RFC 3986, URL hash fragments are processed client-side only and are never transmitted to the server in HTTP requests, headers, or WebSocket handshakes. This means the server physically cannot access the decryption key.
Zero-Knowledge Server: The server receives, stores (in RAM only), and broadcasts encrypted ciphertext. It has no mechanism to decrypt any message, file, voice note, or typing indicator. Even the server operator cannot read user content.
Public Room Transparency: The Public Room uses a shared static key for convenience. It is intentionally designed as an open, unencrypted space (similar to a public IRC channel). For private communication, users should always create a Private Room.
Every Feature, Built In
End-to-End Encryption
AES-GCM 256-bit. Server never sees your content.
Encrypted Voice Notes
Record and send audio messages, fully encrypted.
File & Image Sharing
Share files up to 5MB with inline image preview and lightbox.
Multi-File Upload
Send up to 15+ files at once with progress tracking and auto-retry.
Self-Destructing Messages
Timers: 10s, 30s, 2m, 10m, or Keep (6 hours).
Message Pinning
Pin important messages to the top of the room.
Edit & Delete
Edit your own messages. Admins can delete others' messages.
Real-Time Typing Indicators
See what others are typing, live.
Dark & Light Theme
Toggle between themes. Preference saved locally.
Smart Notifications
Browser notifications with customizable sound toggle.
QR Code Sync
Generate and scan QR codes to join rooms instantly.
Password-Protected Rooms
Set a custom password for extra security.
Room Admin Controls
Room creators can moderate (delete messages, clear room).
Markdown & Code Highlighting
Full markdown support with syntax highlighting for 190+ languages.
PWA (Install as App)
Add to home screen for native app-like experience.
Room Export
Export entire room history as a .txt file.
Why No Database? By Design.
Most messaging platforms store your conversations in a database — sometimes indefinitely. Shareli takes a fundamentally different approach:
- RAM-Only Storage: All messages exist only in the server's temporary memory (RAM). There is no SQL database, no MongoDB, no file-based storage.
- Automatic Cleanup: When a message's self-destruct timer expires, it is permanently removed from memory. When the server restarts, all data is irreversibly lost.
- No Backups, No Recovery: This is intentional. If there's nothing stored, there's nothing to breach, subpoena, or leak.
- Ephemeral by Philosophy: Shareli is designed for the moment — share something now, and let it vanish. If you need permanent storage, use Google Drive or Dropbox.
How Shareli Compares
| Feature | Shareli | Email to Self | Google Drive | Pastebin | WeTransfer |
|---|---|---|---|---|---|
| No Account Required | ✅ | ❌ | ❌ | ❌ | ✅ |
| End-to-End Encrypted | ✅ | ❌ | ❌ | ❌ | ❌ |
| Real-Time Sync | ✅ | ❌ | ❌ | ❌ | ❌ |
| Self-Destructing | ✅ | ❌ | ❌ | ❌ | ❌ |
| Voice Notes | ✅ | ❌ | ❌ | ❌ | ❌ |
| Code Highlighting | ✅ | ❌ | ❌ | ✅ | ❌ |
| Zero Data Retention | ✅ | ❌ | ❌ | ❌ | ❌ |
| File Sharing | ✅ (5MB) | ✅ (25MB) | ✅ (15GB) | ❌ | ✅ (2GB) |
Shareli is not a replacement for cloud storage. It is purpose-built for quick, temporary, private sharing — the kind where you need something transferred right now, securely, and then forgotten.
End-to-End Encrypted
AES-GCM encryption via the WebCrypto API. The server never sees your content.
Self-Destructing
Set timers from 10 seconds to 6 hours. Messages delete automatically with no trace.
No Account Needed
No sign-up, no email, no tracking. Open the app and start sharing immediately.
Works Everywhere
Any browser, any device — phone, laptop, tablet, desktop. Installable as a PWA.
Who Built Shareli?
Shareli was built and is maintained independently. It is a passion project focused on solving a real problem: the lack of a simple, secure, zero-trace tool for quickly sharing information between devices and people.
Have feedback or a question? Contact us here.