Croc GUI: Encrypted Peer-to-Peer File Transfer Without the Terminal (Cross-Platform)

The secret weapon for private file sharing has been hiding in your terminal — until now

You’re staring at a 500 MB video file. Your friend is on Windows, you’re on macOS. Email limits you to 25 MB. WeTransfer runs through corporate servers. AirDrop is Apple-only. The obvious answer for privacy geeks has been a command-line tool called Croc — but asking a designer or a boss to open a terminal and type cryptic commands is a non-starter.

Enter Croc GUI: a graphical wrapper that brings the same military-grade encryption to a drag-and-drop interface. Cross-platform. Open source. No cloud storage. No accounts. Just a six-word code and a progress bar.

What is Croc and why does it matter?

Croc is an open-source file transfer tool created by developer Tom Schollz. Under the hood it uses Password-Authenticated Key Exchange (PAKE) — a cryptographic protocol that lets two parties establish a secure, encrypted channel using nothing more than a shared passphrase. That passphrase (the “code” you generate) is never transmitted directly; instead, it’s used to derive encryption keys via XChaCha20‑Poly1305, the same authenticated encryption used in modern messaging apps.

Data flows through a public relay server, but the relay never sees plaintext content — only encrypted packets. The relay simply helps clients behind NAT find each other and passes the encrypted stream forward. Once the transfer completes, no trace remains on the relay.

Croc’s CLI version has been a darling of developers for years. It’s fast, handles large files, supports resume, and works on every OS. Yet its power was locked behind a blinking cursor.

The GUI revolution: drag, drop, share

A growing ecosystem of third-party interfaces now wraps Croc’s engine into familiar graphical apps. Projects like croc-gui (Electron-based, runs on Mac, Windows, Linux) and similar tools give you:

• Visual drag-and-drop – no more croc send or croc receive commands.
• Real-time progress bars – see exactly how many seconds remain.
• Context menu integration – right-click a file on Windows or macOS to send instantly.
• Multiple file and folder support – send entire directories without zipping.
• Custom relay configuration – power users can point to a private relay for zero trust.

Some GUIs even include a built-in QR code generator for the code phrase — ideal for in-person transfers where you just scan and receive.

How Croc GUI works in practice

1. Sender drags a file onto the app window. The app generates a code like snow-mango-63-kick.
2. Sender shares that code through any channel: a text message, email, Signal, even a sticky note on the desk.
3. Receiver enters the same code in their Croc GUI app. Encryption keys are derived locally on each side.
4. The relay pairs the two clients. File data streams through an encrypted tunnel. The transfer completes — no server ever stores the file.

Comparing Croc GUI to other sharing methods

Croc GUI’s key differentiator is no file size limit and true encryption without requiring a pre-shared key or cloud account. Even the relay operator cannot read your cat video or tax document.

Real-world use cases

Journalists working with sensitive sources need a way to receive large encrypted files without leaving metadata traces. Croc GUI can be launched from a USB drive, uses no accounts, and doesn’t log to any central server.

Designers often shuttle massive PSD or render files between macOS and Windows. Setting up an FTP server is overkill; WeTransfer uploads take forever. Croc GUI bypasses the cloud entirely and transfers at LAN-like speeds if both parties are on the same network (the relay localises traffic).

Remote teams can use a self-hosted relay for internal file drops. ASI Biont supports connecting to external APIs and tools; integrating a custom Croc relay with workflow automation is a growing trend for privacy-first enterprises.

Security deeper dive: PAKE explained

The core magic is PAKE, specifically the CPace protocol variant Croc employs. Here’s the simplified version:

• Two parties start with a low-entropy password (the six-word code).
• Each party mathematically blinds the password with random numbers and sends a public share to the relay.
• Using these shares, both sides compute a high-entropy shared secret — even if an attacker records the entire conversation, they cannot brute-force the password offline because each attempt requires interacting with the real sender or receiver.
• That shared secret becomes the key for XChaCha20‑Poly1305.

This prevents dictionary attacks and man-in-the-middle interception, provided the code is shared out of band (not over the same channel).

Limitations to consider

• Both parties must be online simultaneously – Croc is not a “store and forward” service. If your friend takes hours to open the app, the relay will eventually time out (default timeout is adjustable).
• Relay may be throttled – The public relay at croc6.schollz.com is generous but bandwidth isn’t guaranteed. For frequent transfers, running your own relay with Docker is trivial.
• GUI features vary – Not all third-party GUIs are created equal. Some lack resume or folder support. Check the documentation before relying on one for critical transfers.

The trend: from terminal to interface

Croc GUI is part of a broader movement: taking proven command-line tools and putting them in the hands of non-technical users. Signal’s desktop app brought encrypted chat; Proton’s VPN brought one-click privacy. Now Croc GUI does the same for file transfers.

As of mid-2026, Croc’s original repository has accumulated tens of thousands of stars on GitHub. The community-maintained GUI projects, while not official, are actively developed and have been downloaded hundreds of thousands of times. The “vibe” is clear: strong encryption should be as easy as clicking “Send.”

Getting started today

1. Download a Croc GUI client from an official source (GitHub or the developer’s site).
2. Install it — no admin rights required on most systems.
3. Test with a friend: send a small file, receive it, marvel at how fast and dark it feels.
4. For regular use, consider running your own relay for reliability and zero trust.

Croc GUI is free, open source, and maintained by a community that believes file transfer should not cost you privacy.

The bottom line

Croc GUI removes the last barrier to truly private peer-to-peer file sharing. It takes a powerful cryptographic tool and wraps it in a package anyone can use — no terminal, no registration, no hidden catches. Whether you’re a developer tired of WeTransfer’s limits or a journalist protecting a source, this is the file transfer tool you didn’t know you needed.

And because it’s built on an open protocol, you can audit every line of code. That’s the kind of trust money can’t buy.