KEIBIDROP and Magic Wormhole

Single-use codes, or a peer you keep.

By Marius-Florin Cristian · 2 September 2026

Magic Wormhole moves files with a single-use code that someone types on the receiving machine, from the command line. KEIBIDROP keeps saved peers so there is no code to pass along, it has a GUI as well as a CLI, and it can mount the other machine's folder so you browse it and pull one file.

Side by side

KEIBIDROPMagic Wormhole
InterfaceGUI and CLICLI and a Python library
Per-transfer codeNo, saved peersYes, single-use, typed by hand
Browse the other sideYes, it mountsNo
Open a file without receiving the folderYesNo
AccountNoneNone
File bytes through a public relayOnly through the bridge, when direct failsThrough the transit relay, when direct fails
Works on one local network with the server downYes, multicast discoveryNo, every code comes from the mailbox server
Resume after a dropPer chunkNo, the transfer starts over
EncryptionEnd to end, X25519 with ML-KEM-1024End to end, PAKE
Source codeOpen, AGPL-3.0Open, MIT
ScriptableJSON line per commandPython library

Saved peers instead of a code each time

The two sides exchange an 86 character fingerprint once and connect on it afterwards, so a folder you use every week costs nothing to reopen. A Magic Wormhole code is single use and someone has to read it out and type it in.

The relay's role

During pairing each side leaves an encrypted note on the relay and fetches the other side's note. No file bytes pass through it: they go direct when the two machines can reach each other, and through the bridge when they cannot. On one local network the peers find each other by a multicast announcement and the relay is not involved. A session that is already open keeps running if the relay goes down. Magic Wormhole's mailbox server issues the code for every transfer and its transit relay forwards the bytes when a direct connection fails, so nothing starts while the mailbox server is unreachable. Both of its servers can be self-hosted. The paths are described in Network paths.

An interrupted transfer continues

KEIBIDROP tracks each file per chunk in a sidecar next to it, so a pull that drops continues from the chunks that already arrived. Magic Wormhole starts an interrupted transfer over; a restart is the most reacted request in its issue tracker.

Browse the other side and pull one file

KEIBIDROP mounts the other machine's folder as a folder on yours, and a read pulls only the bytes it touches, so you open the one file you came for instead of receiving a whole directory. It is a real filesystem, so Premiere, Resolve, Blender, grep and git open a path on it the way they open a local one.

Post-quantum key exchange

KEIBIDROP is AGPL-3.0, so anyone can confirm the key exchange is X25519 with ML-KEM-1024, and a recording taken today has to break both halves to be read once quantum hardware exists.

Limits

Common questions

Do I need to type a code every time?

No. KeibiDrop peers exchange an 86 character fingerprint once and connect on it afterwards. Magic Wormhole codes are single use and typed on the receiving machine.

Is there a GUI?

Yes, and a CLI with a JSON line per command for scripting and agents. Magic Wormhole is a command line tool and a Python library.

Can I see what is on the other machine?

Yes. KeibiDrop mounts the folder, so you browse it and pull only the files you open.

What happens if the relay is down?

A session that is already open keeps running, because the relay carries no file bytes. Peers on one local network still find each other by multicast. A new pairing across networks waits until the relay answers again.

Does an interrupted transfer start over?

No. KeibiDrop tracks each file per chunk in a sidecar next to it, so a pull that drops continues from the chunks that already arrived.

Related

Compared with Blip · Compared with LocalSend · Compared with croc · Network paths · Install