Is SHAREit Safe? Permissions, Past Flaws & Alternatives
Separate SHAREit's historical security findings from the version on your phone. Review permissions, ads, and five alternatives for different file-sharing jobs.
You need to send a file, but the transfer app is asking for access you did not expect. Searching “is SHAREit safe” is a reasonable next step. The useful answer should distinguish a documented security finding from a warning about permissions, and both from an unsupported claim that every current installation is malware.
Past security research gives reasons to review SHAREit carefully, but it is not a current-version safety verdict. Check the exact app, permissions, and data practices on your device. If its workflow does not fit what you want to share, there are alternatives for local networks, supported nearby device pairs, and cross-network handoffs.
Is SHAREit safe to use?
A file-sharing app cannot be judged by its name or download count alone. The relevant questions are what it can access, where the file goes, how the transfer is protected, and whether its current version has known unresolved issues.
This article is not a penetration test of the SHAREit version on your phone. It does not establish that today’s Android or iPhone release is compromised. It explains a published historical finding and gives you a concrete way to choose a transfer workflow.
Start with the current SHAREit Google Play listing if you use Android. Review the developer, update information, Data safety section, and disclosures about advertising. The listing is relevant to that Android app; it should not be treated as an audit of the iPhone binary.
What the historical security report actually establishes
In February 2021, Trend Micro published research into SHAREit vulnerabilities that could expose data or enable code execution under the conditions described in the report.
That is evidence about the implementation the researchers examined at that time. It is a reason to take updates and security disclosures seriously. It does not establish that every version distributed years later contains the same flaws.
Before making a claim about current vulnerability status, look for a current advisory, an affected-version range, and remediation information. This guide does not claim to have verified the patch status of each historical issue in the version installed on your phone.
An advertisement, a permission request, and a demonstrated exploit are different observations. Keep them separate when deciding whether to continue using an app. Calling all three “a virus” hides the information that would help someone make a sound decision.
Permissions and privacy: what to inspect
A transfer tool needs access to the items you choose and to the connection used for delivery. The precise permissions depend on the operating system and feature. Local-network access or nearby-device permissions can be necessary; that does not mean unrestricted access to unrelated information is necessary for every send.
Review permissions in the phone’s settings. Ask whether the requested access matches the job you are doing. Selecting one document is a narrower task than managing an entire photo library. Check which choices the app and operating system let you make.
Also distinguish the security of the connection from the app’s broader data practices. Encryption can protect a file in transit without answering every question about analytics, advertising, or access on the device. Read the current disclosures instead of assuming that an encrypted transfer settles all privacy questions.
These checks are useful for any transfer app, including a replacement. No alternative removes every risk just because its website uses the word “private.”
Five alternatives, matched to the job
1. Likz Drop: local, cross-network, and offline phone sharing
Likz Drop supports nearby LAN discovery, sending by nickname across different networks, and offline Android-to-iPhone and iPhone-to-Android transfers without a router or internet. Transfers use end-to-end encryption with ChaCha20-Poly1305 and BLAKE3 key derivation.
Guest mode works without sign-up. A private browser share link lets a recipient download without the app; it remains available only while the sender actively shares and stops working immediately when sharing ends. Resumable transfers are available when a send is interrupted.
Choose this workflow when you need those transfer paths. Keep the sender and receiver available for a live handoff, and choose the route appropriate to their connection.
2. LocalSend: a reachable local network
LocalSend is free and open source, with support for Windows, macOS, Linux, Android, and iOS. Its official documentation describes encrypted local transfers without an account or external internet connection.
It is a good starting point when the devices share a usable LAN. “No internet” does not mean “no connection between devices.” A guest network that isolates clients can still prevent a local handoff. Do not describe this as a requirement that every device use the same Wi-Fi radio; a reachable local network is the relevant condition.
3. Quick Share: supported nearby Android device pairs
Quick Share is Android’s built-in nearby-sharing option, with a Windows app for supported computers. Google’s current iPhone compatibility guide also documents AirDrop interoperability on supported Android models.
Try it if the exact sending and receiving devices support the workflow. Check the current model list; support on one recent phone does not imply support on all Android phones.
4. AirDrop: nearby supported devices
Apple’s AirDrop guide explains its nearby sharing workflow for iPhone, iPad, and Mac. It is convenient when the recipient is already supported and visible.
AirDrop does not make a Windows PC a native recipient. However, it is now inaccurate to say that AirDrop can never exchange a file with Android: Quick Share interoperability exists on supported Android devices. Consult Google’s instructions for that particular device pair.
5. PairDrop: a browser-based handoff
The PairDrop project documents local sharing and internet transfers through paired devices or temporary rooms. Both parties can use a modern browser, and the workflow needs no native-app installation.
It is not restricted to the same local network. The tradeoff is a browser session that must stay available for the transfer, with connectivity depending on the network and service. Check the current project instructions for pairing, rooms, and receiving files.
A simple choice for the next file
If you already have a supported nearby system-sharing option, try that first. If both devices are on a working LAN and you want an open-source tool, LocalSend may be enough. If installation is the main obstacle, consider a browser workflow. If you need a consistent app workflow across different networks or the supported offline Android-to-iPhone path, consider Likz Drop.
To try a local handoff, download Likz Drop on both devices, open the apps on the same trusted LAN, choose the receiving device, and accept the request there. Use sending by nickname when the devices are on different networks.
Likz Drop is free forever for personal, school, and charity use. Commercial use, including client media, paid deliverables, and sharing with teammates for a business, requires Pro at $20 per user per month or $200 per user per year. The pricing page explains that distinction.
Choose based on the task and conditions, then inspect the permissions of the tool you install. A replacement is a practical choice, not a blanket certification that every file-sharing risk has disappeared.
FAQ
Is SHAREit a virus?
The historical research cited here reported vulnerabilities under specific conditions. It does not establish that every current SHAREit installation is a virus. Use a current advisory or assessment of the exact version for a current security claim.
Is SHAREit safe for iPhone?
The iPhone app is a different release from the Android app examined in the cited research. This article has not audited that iPhone release. Review its current permissions and data disclosures, and choose a supported transfer option for the receiving device.
Which SHAREit alternative should I use?
Match the connection and device pair: LocalSend for a reachable LAN, Quick Share or AirDrop for supported nearby devices, PairDrop for a browser handoff, or Likz Drop for its local, cross-network, and offline phone-to-phone paths.