How WolfP2P works

For:Advanced users and digital professionalsAssumes familiarity with files, browsers, and common computer workflows.

Each participant runs a WolfP2P browser client locally in a browser tab. The coordination service creates a temporary tunnel, admits the two sessions, and exchanges the connection details their browser peers need. The peers then establish an encrypted direct connection: they exchange the file metadata needed to review the offer, and after acceptance they stream file bytes and verification information while the receiver writes locally. The coordination server processes coordination data, but not file bytes or file metadata.

The current connection configuration uses host candidates only, with no STUN traversal between separate private networks and no TURN relay. A shared or otherwise directly reachable network can work, subject to browser and network policy; remote reachability is not guaranteed.

Before you start

  • Keep both computers online and both transfer tabs open while files are moving.
  • Use browsers with the capabilities needed for the selected files, folders, and recovery mode.
  • Give the receiving browser access to a writable destination with enough free space.
  • Use a network that permits the required direct WebRTC connection.

The transfer, from tunnel to completion

The interface exposes each decision, while the protocol keeps coordination, peer connectivity, and file-transfer state distinct.

  1. Create a temporary tunnel

    The sender creates a tunnel. The server reserves two seats and returns an invitation: a private link and six-character code. Each browser tab handles one tunnel.

  2. Join and confirm the receiver

    The receiver follows the link or enters the code, then explicitly joins. The first browser admitted takes the receiver seat; the invitation identifies the tunnel but does not prove identity, so the participants should confirm each other before sensitive files are offered.

  3. Establish the direct connection

    The coordination server exchanges WebRTC connection details between the two browser clients. Once they become connected browser peers over the encrypted direct transfer channel, coordination status and peer connectivity can change independently: a live direct transfer may briefly outlast a server interruption, although some controls remain unavailable until coordination returns.

    When both computers are on the same local network and the browsers establish a local connection, the files travel over that network instead of taking an internet round trip. WolfP2P still uses its online service to coordinate the transfer. Guest Wi-Fi isolation, firewalls, VPNs, or browser policies can prevent a local connection. ICE provides the connection-candidate mechanism; sharing a Wi-Fi name alone does not prove which path was selected.

  4. Select, review, and accept

    The sender selects files or, in a fully compatible browser, a folder without creating a ZIP archive. The browser clients exchange the file metadata needed for the receiver to review the offered paths, file count, and total size. The receiver chooses the available destination handling and accepts or declines the offer. File bytes do not move before acceptance.

    Choose a destination folder you can write to. If the browser refuses Documents or reports system files, create a subfolder inside Documents and select that instead. See folder permissions.

  5. Transfer, write, and verify

    The sender's browser client reads the accepted file set locally and streams its file bytes in pieces over the direct channel. The receiver's client writes and verifies them locally. Both sides can follow file, byte, speed, elapsed-time, and estimated-time progress; the coordination server receives final outcomes as coordination data, not file bytes, file metadata, or a progress heartbeat. Optional volume analytics are separate and consent-controlled.

  6. Complete or recover

    Both peers confirm completion of the one accepted file set carried by the tunnel. After an interruption, WolfP2P attempts reconnection; supported recovery can reuse completed matching files and, in Safe mode on a compatible receiver, a durable checkpoint within a large file. Quick mode restarts the interrupted current file.

Two views of the system

The sender creates a tunnel and shares its invitation privately. The service admits the receiver and relays connection signaling. The browser peers exchange the offer, then transfer and verify accepted files directly. Coordination receives the terminal outcome; optional volume analytics are separate and consent-controlled.

The coordination server helps the two browser gateways meet; it does not receive the file metadata or file bytes that cross directly between them. It still processes connection setup, membership, and final outcomes.

Think of the server as coordinating two endpoints at a crossing. It creates the shared rendezvous and helps align the browsers, but the accepted files cross from one browser to the other rather than through the server.

Conceptual illustration of a coordination server aligning two gateways while the transfer crosses directly between them.
The coordination server helps the two browser gateways meet; it does not receive the file metadata or file bytes that cross directly between them. It still processes connection setup, membership, and final outcomes.

Think of the server as coordinating two endpoints at a crossing. It creates the shared rendezvous and helps align the browsers, but the accepted files cross from one browser to the other rather than through the server.

Boundaries of a direct browser transfer

  • A managed or restrictive network can prevent the required direct WebRTC connection.
  • WolfP2P has no TURN relay or server-upload fallback when a direct path cannot be established.
  • The coordination server remains a trust component for tunnel admission, signaling, and the limited coordination data it receives.

Terms used by WolfP2P

These definitions are the canonical meanings of specialized terms used by the product and documentation.

Tunnel

A temporary transfer arrangement for two peers, identified by a six-character code. It reserves two seats—one for each peer—and carries one accepted file set. It is not a VPN or permanent network tunnel.

Peer

The other person participating in a tunnel. Each peer uses a browser tab, occupies a seat, and acts as the sender or receiver. Technical explanations may use browser peer for the browser endpoint itself.

Seat

One of the two participation places in a tunnel. A peer's session occupies or reserves its seat; once both seats are held, another browser cannot join that live tunnel.

Browser tab

The open browser page holding one WolfP2P session. Each tab handles one tunnel; separate tabs can run separate transfers.

WolfP2P browser client

WolfP2P code running locally in a participant's browser tab. With browser permission, a sender client can read selected files and a receiver client can write to the selected destination. The clients exchange the file metadata required to present and review an offer; after acceptance, they exchange the required file bytes and verification information over the direct transfer channel. They do not send file bytes or file metadata through the coordination server.

Browser peer

A WolfP2P browser client while it is participating as one endpoint of a direct peer-to-peer connection. A browser peer can hold the sender or receiver role; it is not a separate component with which the browser client shares files.

Session

One browser tab's participation in a tunnel. It occupies a seat and holds the local information used for supported reconnection and recovery. It belongs to that tab rather than to an account.

Invitation

The link or six-character code shared with the intended peer. It identifies the tunnel and lets a browser request its open seat, but it does not verify the identity of the person using it.

Tunnel code

The six-character identifier included in an invitation. WolfP2P generates it from a 30-bit space of 1,073,741,824 possible codes. It is a temporary join credential, not proof of identity. Read how WolfP2P limits code guessing for the calculation, rate limits, and practical precautions.

Sender

The peer who selects a file set and sends its offer.

Receiver

The peer who reviews the offer, chooses the available destination handling, and accepts or declines the file set.

Offer

The description of a file set shown before file bytes move. It includes offered paths, file count, and total size; accepting it begins the transfer.

File set

The individual file, selected files, or folder collection included in one offer, moved in one transfer, and carried by one tunnel.

File bytes

The contents of the files selected for transfer. The sender's browser client reads them and the receiver's browser client writes them. They travel through the direct transfer channel, not through the coordination server.

File metadata

Information describing an individual selected file or its place in the offered collection rather than its contents. In WolfP2P, this can include the filename, relative folder path, per-file size, collection manifest, and content-derived verification information. The browser clients exchange the information required to review, reconstruct, and verify an accepted transfer. The coordination server does not receive this file metadata.

File metadata is distinct from metadata embedded inside file bytes, such as EXIF fields, and from filesystem metadata such as modification time, ownership, permissions, or extended attributes. Those categories have separate preservation rules.

Transfer

The delivery of one accepted file set from the sender to the receiver over the direct transfer channel.

Direct transfer channel

The browser-to-browser path over which a transfer moves information and file bytes. A browser-provided WebRTC data channel implements it, and DTLS protects it in transit.

Coordination service and server

The coordination service is the server-side WolfP2P capability that creates tunnels, admits participants, and exchanges the connection details required to establish the direct transfer channel. The coordination server is the component that performs this work, processes coordination data, and owns authoritative tunnel membership. In general-audience explanations, it may be called the WolfP2P server. It does not receive file bytes or file metadata.

Coordination data

Information used to create, secure, maintain, and observe a temporary tunnel rather than describe the transferred files. It can include tunnel lifecycle, participant roles, temporary identifiers, connection signaling, IP and request information, connection times, final outcomes, rate-limit events, coded operational events, and errors. The coordination server processes this data but does not receive file bytes or file metadata.

Checkpoint

Durable destination progress recorded in Safe mode so part of a large file can be reused after an interrupted transfer or restored session.

Middle copy

An additional file copy uploaded to and held by an intermediary before the receiver downloads it. WolfP2P's direct transfer channel does not create a middle copy on its coordination server.

Continue into the details