Security

We take the safety of your galleries seriously. Here's how Lensdrop is built to protect your work and your clients.

Access control

• Unguessable links: every gallery has a private, random share link.
• Optional PIN: gate viewing behind a per-gallery code.
• Watermark and download gates: watermarking and downloads are separate per-gallery switches. A watermarked gallery serves watermarked files even on download; clean, full-resolution originals (and the bulk download) are only handed over when you turn the watermark off, and only when you enable downloads.

Connected devices

You can connect a computer or a camera to send photos into a gallery as you shoot. A computer connects through a browser sign-in, so its credential is created and stored by the app and is never shown to you or pasted anywhere.

• Cameras use FTP: a camera has no browser, so you type a username and password into its own FTP settings. Cameras that support FTPS get an encrypted connection. Many camera bodies only speak plain FTP, which cannot be encrypted, so a camera credential is deliberately narrow: it can only add photos, only to the one gallery it currently points at, and it grants nothing else on your account.
• Revocable at any time: removing a device in Account, Devices stops its credential working immediately, on its very next connection.
• Nothing is kept on the relay: a photo passes through on its way to gallery storage and the copy on the relay is deleted as soon as it lands.

Infrastructure

Photos are uploaded directly to object storage and served through an edge worker, so the bytes never pass through our app server. Connections use HTTPS, and access to originals is granted via short-lived signed URLs. We run on established cloud providers; the specific services we use and how they handle data are listed in our Privacy Policy.

Authentication

Sign-in uses email one-time codes or Google OAuth, handled by our auth provider. We never store your password.

Reporting an issue

Found a vulnerability? Please email security@lensdrop.app and we'll respond quickly.