PeerPayload Connect 0.3.0

First public release. PeerPayload Connect sends files and folders straight from one of your devices to another — phone to laptop, laptop to a friend's PC — with no account, no sign-up and no cloud storage.

• Pair once, by QR code or link. Each device makes its own key on first run; you pair by scanning a QR code or opening an invite link, and both sides show the same safety code.
• Device to device, end-to-end encrypted. Files go directly between the two devices when they can reach each other, and otherwise through a relay that only ever sees encrypted data. Each side checks the other's key, so nobody in between can read or swap the files.
• Big files are fine. Transfers are checked chunk by chunk, can be paused and resumed from either device, and pick up where they stopped after a dropped connection or a restart.
• Android: transfers keep going in the background, and with Stay ready to receive on, incoming files show up as a notification even when the app is closed.

Early preview — good to know

• The free hosted servers sleep when idle, so the first pairing or transfer after a quiet spell can take up to a minute.
• The Windows installer isn't code-signed yet; see "Checking a download" below.
• Not yet: iOS and macOS apps, messaging, multiple devices per person, revoking a pairing.

How it protects your files, and what it doesn't protect against: security model. Bugs and feedback are welcome as issues.

Downloads

Platform	File
Android 8+	PeerPayload-Connect-0.3.0-android.apk
Windows 10/11, 64-bit	PeerPayload-Connect-0.3.0-windows-x64-setup.exe
Linux x86-64 (Ubuntu 22.04, Debian 12 or newer)	PeerPayload-Connect-0.3.0-linux-x86_64.AppImage

On Linux: chmod +x the AppImage, then run it. If it doesn't start, install FUSE 2 (libfuse2t64 on Ubuntu 24.04+, libfuse2 on 22.04) or run it with --appimage-extract-and-run.

Checking a download

Every file was built by this repository's release workflow from the tagged source. To check one:

sha256sum -c SHA256SUMS.txt --ignore-missing          # the file wasn't changed
gh attestation verify <file> --repo Aditya-Karn234/PeerPayload    # and was built here, from this tag

The Windows installer isn't code-signed, so Windows SmartScreen may warn ("More info" > "Run anyway") once you've checked it as above. Don't turn off SmartScreen or antivirus.

The Android app's signing certificate is SHA-256 b91712ae6327eb0b2a489d64ac1929ee292116e585018bc852b21b0b412f8e44.