About MedFolder
MedFolder is a free, end-to-end encrypted file-sharing tool built for sharing medical documents securely: files are encrypted in your browser with the Web Crypto API (AES-GCM) before they ever leave your device, and stored as ciphertext in your own Google Drive. The server never has access to a key that could decrypt your files.
How it works
- You upload a file; it's encrypted locally and the ciphertext is saved to your Drive.
- Creating a share link generates a decryption key that lives only in the link's URL fragment — it's never sent to or stored on the server.
- Anyone with the link can decrypt and download the file directly in their browser.
- Links expire automatically after 24 hours and can be revoked earlier at any time.
- Setting a passphrase lets you re-copy your active links from any of your own devices, without ever exposing the underlying keys to the server.
Privacy & data
- File contents are never readable by the server — only you and people you share a link with can decrypt them.
- Filenames and file sizes are kept as plain metadata so your file list loads without unlocking.
- Deleting a file removes it from your Drive and revokes every link pointing to it.
- Expired links are purged automatically; no long-lived record of a share is kept.
How this differs from emailing a file or a generic cloud link
Emailing a PDF or sharing a generic cloud-storage link typically means your email provider or that storage service can read the file itself. MedFolder encrypts the file in your browser before it's ever uploaded, so the server only ever stores ciphertext it cannot read. Share links also expire automatically after 24 hours and can be revoked instantly — unlike an email attachment or an open cloud link, which stays accessible indefinitely once sent.
Frequently asked questions
Is MedFolder free?
Yes. MedFolder is free to use — no paid plans, no account limits, no credit card.
Can MedFolder read my files?
No. Files are encrypted in your browser (AES-GCM via the Web Crypto API) before upload. The server only ever stores ciphertext and never holds a key capable of decrypting it.
Where are my files stored?
In your own Google Drive account — specifically, only files MedFolder itself creates there (the narrowest Drive access scope available), not your existing Drive contents.
How long do share links last?
Links expire automatically 24 hours after creation, and can be revoked earlier at any time.
What happens if I delete a file?
It's removed from your Drive, and every share link pointing to it is revoked immediately.
Do I need to create a separate account?
No — you sign in with your Google account. An additional passphrase you choose encrypts your files’ keys; it’s never sent to or stored on the server.