Send large files from the command line

Pass files or a folder. The link is the only thing printed to standard output, so dropvi send footage.mov | pbcopy copies the link and nothing else. Add a title, a message, an expiry in days or email recipients with --to.

Every file's SHA-256 and CRC-32 are worked out as it uploads. If the connection drops or you press Ctrl+C, dropvi send --resume <id> carries on from the first part not yet stored, as long as the files have not changed.

On every plan, --password-stdin protects the transfer with a PIN. On Business Pro and above, --max-downloads sets a download limit. Reading the PIN from standard input keeps it out of your shell history and process list.

dropvi get downloads every file in a transfer and compares each one with the SHA-256 the sender's client recorded. A file that does not match is deleted and the command exits with code 9, so a damaged download never sits on disk looking correct.

File names from the server are checked before anything is written. An existing file is never overwritten without your say; in a script, the new copy is saved as report (1).pdf instead.

dropvi send encrypts every transfer end to end on your own computer before upload: the file contents, names and types, the title, the message and the sender name. The key is only in the share link, after #k=, and is never stored on Dropvi's servers. Anyone who has the full link can open the transfer, so handle it as you would a password. If you lose the link, Dropvi cannot recover the key.

Dropvi still sees the number and sizes of the files, the email addresses you pass to --to, the expiry and download limit, and, for a transfer with a PIN, the PIN itself, which it checks before a download starts.

With --to, the email Dropvi sends your recipients contains the full link with the key, so they open the files with one click. To write it, the CLI gives Dropvi the key when the upload finishes. Dropvi uses it only for that email and does not store it, and anyone who can read the email can open the files. To keep the key from Dropvi entirely, leave out --to and send the link yourself. With --json, the key is also in data.key.

dropvi get decrypts a transfer sent from the website or the CLI. It takes the key from the full link, then from standard input with --key-stdin, then from the DROPVI_KEY environment variable. A key that does not open the transfer exits with code 2 and the error wrong_key. A transfer that was altered or cut short exits with code 9 and the error integrity, and the damaged file is not kept.