Roadmap · updated 28 October 2026
What is coming to TotalDrop
Dates are aims, not promises: a feature ships only when it is safe. Every step can be followed in the open repository.
October 2026
-
An open protocol
TotalDrop Protocol v0: transfer codes with CPace, Noise XXpsk3 with post-quantum ML-KEM-768, QUIC with single-use keys. Written down so anyone can build a compatible app.
All platforms -
Command-line client
Send and receive from a terminal on Linux, macOS and Windows.
Linux · macOS · Windows -
Android beta
Send and receive with a code, in English and Turkish, following the phone's colours. On Google Play by invitation.
Android -
Linux app
Qt 6 and native Wayland. Follows the theme of KDE Plasma, Hyprland and Omarchy live. Packages for Arch, Debian, Ubuntu and Fedora.
Linux -
Through firewalls
Both devices listen and dial, so a firewall on one side no longer stops a transfer.
All platforms -
Across the internet
Devices find their public address with STUN and connect directly through most home routers. When that is impossible, the encrypted traffic goes through our relay on Cloudflare, which sees nothing of it.
All platforms -
Privacy mode in the command line
Relay only: the other side never learns your IP address.
Linux · macOS · Windows
November 2026
-
Scan the QR code with the camera
Point the phone at the sender's screen instead of typing the code.
Android -
Receive in the browser
Open a link, type the code, save the files. Nothing to install, still end-to-end encrypted.
Web
Winter 2026–27
-
Resume interrupted transfers
A dropped connection picks up where it stopped, without sending what already arrived.
All platforms -
Switch from relay to direct
A transfer that started through the relay moves to a direct path as soon as one opens.
All platforms -
Windows app
A native Windows 11 app. Signed once donations cover the certificate.
Windows -
Arch User Repository
Install and update with your AUR helper.
Linux
2027
-
iPhone, iPad and Mac
Native apps, once donations cover Apple's developer account.
iOS · macOS -
Links and offline delivery
Send to someone who is not online: an encrypted copy waits up to 7 days, and only the link opens it.
All platforms -
An account that is only a number
Optional, Mullvad-style: no email, no phone, no password. Your own devices send to each other without a code.
All platforms -
Saved contacts
Pair once, check four words, and send to that person again without a code.
All platforms -
Full privacy mode in the apps
Relay only, over Tor, with padded sizes, for people who also need to hide their IP address.
All platforms
After the audit
-
Independent security audit
An outside firm reviews the protocol, the cryptography and the code that handles untrusted input. The full report is published.
All platforms -
A formal model of the handshake
A ProVerif or Tamarin proof that the hybrid handshake keeps its promises.
All platforms -
Post-quantum signatures
Device keys add ML-DSA-65 next to Ed25519, so even a future quantum computer cannot impersonate you.
All platforms -
Community relays
People who opt in can use relays run by others, from a signed list.
All platforms