PQCPost-quantum SSH, on by default

Move files to any server. Keep them private for decades.

BlazeSCP is a fast, native file transfer client for SFTP, FTP, WebDAV and S3, with quantum-safe key exchange that protects what you send today from tomorrow's computers.

Version 0.2.43 · macOS, Windows and Linux · No account needed

Works withSFTPFTPFTPSWebDAVAmazon S3Cloudflare R2WasabiMinIONextcloud

Quantum-safe by default

“Harvest now, decrypt later” stops here.

Encrypted traffic can be recorded today and decrypted once quantum computers are big enough. BlazeSCP negotiates hybrid post-quantum key exchange with every SSH server that supports it, and falls back to classical SSH in the same handshake when it doesn't, so nothing breaks.

  • ML-KEM-768 + X25519, the NIST standard, as used by OpenSSH 9.9 and later
  • NTRU Prime + X25519, supported by OpenSSH since 8.5 and the default in 9.0 to 9.8
  • Always visible: a PQC tag on every quantum-safe connection
How BlazeSCP protects your data
Key exchange, best first
  1. PQCmlkem768x25519-sha256
  2. PQCsntrup761x25519-sha512
  3. CLcurve25519-sha256fallback
  4. CLecdh-sha2-nistp256 · diffie-hellman…

Hybrid: even if the post-quantum half were broken, the session is still as strong as classical X25519.

Everything in one window

The file transfer client that keeps up with your work.

Two panes, any servers

Local and remote side by side, or two servers at once. Tabs in each pane, each keeping its own folder and history.

Transfers that survive

A real queue: pause, resume, retry. Quit mid-upload and pick up where it stopped, at the byte, after you reopen.

Fast where it counts

Pipelined SFTP, parallel files, S3 multipart uploads, and server-side copies when source and destination are the same server.

Verified copies

Optional SHA-256 check after every file, computed on the server where it can be. A copy that doesn't match is removed and reported.

Every way to sign in

Passwords, SSH keys, the SSH agent, two-factor codes. Import your hosts from ~/.ssh/config in one click.

Works with AI assistants

A local MCP server lets Claude Code, Gemini CLI, Codex and other assistants manage your servers and browse files, without ever seeing a password.

See every feature

No telemetry, no account

BlazeSCP talks to your servers and nothing else. The only optional extra request is the update check.

Secrets in your keychain

Passwords and passphrases go to the macOS Keychain, Windows Credential Manager or Secret Service. Never to a file.

Signed updates

Updates install only if they're signed with our release key, and only when you click Install.

Your next upload could be quantum-safe.

Free for personal use, on every platform. Install it in a minute and bring your servers with you.