Share.Ninja

How to send a passport scan safely

Someone needs a scan of your passport: a landlord, an employer, a bank, a visa agent. The usual ways are the problem. An email attachment sits in your sent folder, in their inbox, on both mail servers and in every backup of them, for as long as those accounts exist. A file uploaded to a chat stays on the messenger's servers. A folder shared from a cloud drive stays shared until someone remembers to stop.

What you want is simpler: the scan reaches one person, and then it stops existing anywhere else.

What a Share.Ninja link does

The file is encrypted on your device before anything leaves it. The key travels inside the link, in the part after the # sign, which browsers never send to a server. Our servers, and anything on the network in between, only ever handle a file they cannot read.

The link expires on its own: 24 hours without an account, 48 hours if you sign in. When it expires, the encrypted copy is deleted. You can stop sharing earlier, from any device, and the link dies everywhere at once.

The other side needs no app and no account. The link opens in any browser, with the scan right there to view and download.

Step by step

  1. Open share.ninja in any browser, or the app, and pick the scan. You have a link.
  2. Send the link to the person. The link is the key: whoever has it can open the scan until it expires. Send it to the one person who needs it, not to a group, and through the channel you would use for the scan itself.
  3. When they confirm they have it, stop sharing. The link stops working everywhere, and the encrypted copy is gone.

If you are at a computer and the other person is waiting, make the link direct-only. Then nothing is uploaded at all: the scan streams from your computer to their browser, and the moment you close the tab, there is nothing left to download.

On Plus and Pro, an email tells you when the share was opened and when it was downloaded.

What stays behind

On our side: a record that a share existed, when it was created and when it expired, and that it was downloaded, with the time and the IP address. Not the file, not its name, not the key. The full list is on the Security page.

On their side: whatever they downloaded. That part is between you and them, as it would be with any file you hand over.

If you are the one asking for the scan

Send the person to share.ninja and ask for a link instead of an attachment. You need no account to open it, and the scan never lands in your mailbox.