Frequently Asked Questions
What is Ghost Share?
Ghost Share is a secure file sharing service designed with a zero-knowledge architecture. Files are encrypted directly in your browser before being uploaded, ensuring only you and intended recipients can access the plaintext data.
How secure is the encryption?
We utilize AES-256-GCM for file content encryption, a widely trusted standard. All cryptographic operations happen client-side, meaning your unencrypted data never reaches our servers.
What happens if Ghost Share's servers are compromised?
In such an event, the attackers would only gain access to encrypted data blobs and encrypted key material. Without your master vault password (which we never store or transmit), this data remains effectively useless.
What if my own device or account is compromised?
If your device is compromised, the security of your Ghost Share files depends on the security of your master vault password. An attacker would still need that password to decrypt your stored keys and files. Strong, unique passwords are, as always, recommended.
Can I recover my master password if I forget it?
Due to the zero-knowledge design, password recovery is not possible. We have no way to access or reset your master password. It is crucial to store it securely, as losing it means losing access to your encrypted files.
How does sharing with non-users work?
You can generate temporary, encrypted links. This process uses an ephemeral key pair and ECDH key exchange. The decryption key component is embedded in the URL fragment (#), which isn't sent to our servers, allowing the recipient to decrypt the file directly in their browser without needing an account.
Why the name "Ghost Share"?
The name reflects the principle of zero-knowledge privacy – your data is present but remains unseen by unauthorized parties, including the service provider itself.
Is this level of security necessary for everyday files?
While robust, the security is designed to be seamless. Whether it's sensitive documents or just personal files you prefer to keep private, Ghost Share provides a consistent level of protection without added complexity for the user.