Better Share browser sharing and security settings

Share with a QR code or short code

When you start a share from the Overview or Download share page, Better Share generates a LAN link and its QR code. The link carries a one-time random token and an expiry.

The other person scans it and opens the share page in a browser to download what you shared, or to upload files to your Mac if you allow it. The 6-digit short code is for a human check that both sides opened the same share.

Files and folders selected on the Overview page are mounted onto the share session without copying data; remove an item and its old link stops working immediately.

Guest PIN and upload policy

A share can require a guest PIN, which visitors must enter before the page opens.

The guest upload policy has three settings: require confirmation (the default, into the review queue), accept automatically, or refuse. Whichever you choose, the maximum file, directory, and type limits still apply, and received files get the macOS quarantine attribute.

• Require confirmation: every upload waits for your review on the Receive page
• Accept automatically: for trusted sources such as your own phone
• Refuse: the share page allows downloads only

Bind a network interface

When your Mac is on several networks at once (wired plus Wi-Fi, or a virtual machine adapter), pin the share to one interface so the link is reachable only on that interface's subnet.

Better Share warns when it detects that other subnets cannot reach the link. Connect the other device to the same network, or pin a different interface.

Browser-channel access control

The browser channel is served over HTTP inside the LAN, with access controlled by one-time tokens, expiry, the guest PIN, and failure rate limiting. Use it only on networks you trust.

The current version does not provide device-to-device transfer or AirDrop integration; use system AirDrop directly when Apple devices support it.

Privacy boundary of clipboard monitoring

Clipboard monitoring is off by default. When on, it reads only metadata (type, size, filename, and the first 80 characters of text); items from password managers and text that looks like keys, certificates, or one-time codes are suppressed.

Each candidate offers four actions: generate link, send to device, open source, and ignore. Nothing is shared until you click. The event log stays on your Mac and can be cleared at any time.