How to share files anonymously — what works and what only looks private

"Anonymous upload" usually means only that no account is required. That is a low bar, and it is worth understanding what an upload actually reveals before you rely on it.

This guide separates what genuinely protects you from what only feels private.

What an ordinary upload leaks

When you upload a file anywhere, several things travel with it:

Your IP address. The hosting server sees it and usually logs it.
The filename. invoice-acme-march.pdf says a great deal before anyone opens it.
File metadata. Photos carry EXIF data, which can include the camera model, the time and often GPS coordinates. Office documents carry an author name.
The content itself. On most services, staff could read it if they wanted.

Not requiring an account solves none of these.

The steps that actually help

1. Strip metadata before uploading. This is the most overlooked step and often the most revealing one. A holiday photo can carry the exact coordinates of your home.

On Windows: right-click → Properties → Details → "Remove Properties and Personal Information".
On macOS: open in Preview → Tools → Show Inspector → remove location data.
On phones: most gallery apps offer "remove location" when sharing.

2. Rename the file. Replace anything descriptive with something neutral. If the name matters to the recipient, tell them in the message rather than encoding it in the filename.

3. Turn on end-to-end encryption. When the file is encrypted in your browser before upload, the host stores data it cannot read — and on our site the filename is encrypted too, which closes the leak in step 2 entirely. See what end-to-end encryption means.

4. Do not list it publicly. Leave the "publish to catalogue" option off so the file never appears in a public index or sitemap.

5. Consider your IP. If your IP is genuinely sensitive, a VPN or Tor is the only thing that addresses it. No upload service can hide your address from itself.

Where anonymity ends

Being honest about the limits matters more than a reassuring checklist.

The recipient knows something. Whoever you send the link to knows you sent it. Anonymity toward the host is not anonymity toward your contact.
Content can identify you. A document with your writing style, a photo of your desk, a screenshot with your username in the corner — encryption does not help with any of that.
Legal process exists. Hosts respond to lawful requests. Anonymous uploading is not a shield against a court order.
Payment deanonymises. The moment you pay for a premium tier, the anonymity is gone.

A realistic threat model

Most people asking about anonymous sharing want one of two things, and they need very different answers:

"I do not want to create another account." Any no-signup service does this. Nothing more is needed.

"I do not want this traced back to me." That is a much harder problem. You need metadata stripping, encryption, a neutral filename, a VPN, and care about the content itself. Missing any one of them can undo the rest.

Be clear with yourself about which one you are actually solving.

Doing it on this site

Our upload page needs no account, no email and no verification. For a private share:

Strip metadata from the file first.
Switch on end-to-end encryption — content and filename are both encrypted in your browser.
Leave "publish to catalogue" off.
Send the full link, including the part after #, over a channel you trust.

The decryption key never reaches our servers, so we cannot read the file either.

In short

No-signup uploading is a convenience feature, not an anonymity feature. Real privacy comes from stripping metadata, encrypting before upload, and being honest about your actual threat model.