User guide

Every feature, explained.

From your first transfer to managing a fleet of managed devices. Sections marked PRO need the one-time Pro unlock; everything else is free.

Getting started

Air Drive runs a real web server on your iPhone or iPad. Computers on the same Wi-Fi reach it in a browser — or mount it as a disk. Nothing is installed on the computer, no account is created, and no internet connection is used.

  1. Open Air Drive and tap Start. The Server screen shows the address (like 192.168.1.20:8080), a QR code, and a status card while the server runs.
  2. Connect from your computer. Type the address into any browser, or scan the QR code with your phone's camera from the computer. The browser opens straight into the Drive.
  3. Authenticate. Depending on the access mode (see below) you'll enter a PIN or password, or wait for the owner to approve the connection on the phone.
  4. Move files. Upload files or whole folders with drag and drop, download anything — or a whole folder as a ZIP — and preview before you send.
Air Drive Server screen with the server running: pairing PIN and device addresses
The Server screen while running — address, pairing PIN and status at a glance.

First transfer, 60 seconds

Start the server → scan the QR from a Mac → type the PIN → drag a folder onto the browser window → watch it land in the app's Files tab. That's the whole loop.

Requirements

  • iPhone or iPad on iOS/iPadOS 26 or newer.
  • A computer or device on the same Wi-Fi network (or a USB connection to a Mac, which exposes the Drive in Finder).
  • Local network permission for Air Drive the first time you start the server — iOS asks once.

Where your files live

The Drive root is the app's Documents folder, visible in the Files app and in Finder over USB. Everything you upload via the browser, the Share extension or the Vault's export lands there. Partial uploads and thumbnails live in app-private storage and don't clutter the Drive.

Access control

The server is off by default. When it runs, three access modes decide who gets in. Choose one in Settings → Access; the Server screen always shows the current mode.

ModeHow it worksBest for
Approval (default) A new computer asks on first connect; you get an approval card on the phone and tap Allow or Deny. Approved computers are remembered. Home use, maximum control
PIN Type a short PIN on the connect screen; it's exchanged for a session. Change it any time in Settings. Quick connections from your own devices
Password A traditional password prompt in the browser. There is no recovery — there is no account. Reset it in Settings → Access. Shared or semi-public machines
Sessions expire. Each approved computer holds a session cookie (HttpOnly, SameSite=Strict) that expires after the idle timeout — 30 minutes by default, adjustable in Settings. Reconnecting re-prompts according to the access mode.

Read-only and per-client permissions

Settings → Access includes a Read-only switch (clients can browse and download but never upload, rename or delete) and fine-grained toggles for uploads, downloads, delete and rename per session. The Server screen reflects what the current client can do.

The Air Drive web client login screen asking for the password
What a new computer sees first: the login gate, before any file is visible.

The web client

The browser client is built into the app — served locally, under 200 KB, with zero third-party requests. Everything below works in Safari, Chrome, Edge and Firefox on macOS, Windows and Linux.

Browsing

  • Breadcrumbs, column sorting (name, size, date) and instant search.
  • Click a file to open the preview pane — photos, video, audio, PDFs, text — before you download.
  • Multi-select with click/⌘-click or Shift-click for batch downloads.
  • A storage meter shows how full the device is.
Air Drive Files tab with folders, a PNG file and the storage bar
The Files tab: folders, storage bar, quick actions.
Air Drive web client with the image preview open
The preview pane in the web client — check a photo before you download it.

Uploading

  • Drag files or whole folders onto the browser window, or use the upload button.
  • Uploads are chunked (64 MB max chunk) and resumable: if a transfer drops, retry in the transfers drawer and it continues from where it stopped — even multi-gigabyte files.
  • Choose the destination folder before uploading; Received/ is the default drop zone.

Downloading

  • Download single files directly.
  • Download a folder as a ZIP64 archive — streamed, so huge trees don't fill the phone's memory.

Transfer history & activity log

Every transfer is recorded. The Transfers drawer in the web client shows progress and retry controls; the app's Transfers tab lists history. The full activity log (who connected, what they did, from which IP) can be exported as CSV PRO.

HTTPS for hostile networks

HTTPS + fingerprint

Settings → Server → HTTPS serves the client over TLS with a self-signed certificate generated on the device. The Settings screen shows the certificate fingerprint — read it out (or compare visually) with the person on the other end to rule out interception. Ideal for hotel and office Wi-Fi.

Mount as a drive PRO

WebDAV mounting makes Air Drive behave like a USB stick over Wi-Fi: drag and drop in the native file manager, no browser at all.

Set it up

Set a WebDAV password in Settings (Pro gate), then connect from the computer:

macOS Finder:   Go → Connect to Server → dav://192.168.1.20:8080/
Windows:        Map network drive → \\192.168.1.20@8080\DavWWWRoot
                (or https://… when HTTPS is on)
GNOME Files:    Other Locations → dav://192.168.1.20:8080/

Connect with your Air Drive username and the WebDAV password. The mounted volume supports browse, upload, download, rename, delete and folder creation like any network share.

HTTPS recommended. Over plain HTTP, WebDAV credentials travel unencrypted on the local network. Turn on HTTPS (Pro) before mounting on any network you don't fully trust.

The Vault PRO

The Vault is an encrypted safe inside the app for files that must not be readable if someone else holds your phone — or if the phone itself leaves your hands.

How it works

  • Files are sealed with AES-256-GCM, one random key per file, the master key wrapped and held in the Keychain with Face ID / device-passcode protection.
  • The key is ThisDeviceOnly: an iCloud or backup restore onto a new device cannot open the Vault. That's the point — a thief with your backup has nothing.
  • File names are encrypted too, not just contents.
  • Every segment is authenticated and position-bound, so tampering, truncation or reordering is detected and refused.
  • The full container format (ADV1) is published in the security guide.

Using it

  1. Move files in. Select files in the Files tab and choose Vault, or use the Share extension → Air Drive → Vault.
  2. Open with Face ID. The Vault screen requires Face ID / device passcode each time it's opened.
  3. Unseal when needed. Sealed files appear as ciphertext blobs; open them through the Vault screen only.
  4. Migrate by exporting. To move to a new phone, use Export everything — the Vault decrypts into the Drive, you re-add on the new device, and delete the export.
There is no key recovery. The key exists only in this device's Keychain. Lose the device without an export and the Vault contents are gone — by design. Export before retiring a device.

Photos bridge PRO

Share albums from the Photos app over Air Drive's web client without copying a single photo into the Drive.

  • A virtual Photos tree appears in the web client alongside your Drive folders.
  • Pick the albums to expose; guests and clients browse them like normal folders.
  • Read-only by nature — the bridge can serve photos but never receives or deletes them.
  • HEIC converts to JPEG on the fly so every computer can open them; Live Photo pairs (photo + video) stay together.
  • Nothing is duplicated: the bridge streams from the photo library at request time.

Typical use

Grant a family member read-only access to a "Holiday 2026" album — they browse and download from their laptop while you're both on the same network, and the photos never leave your phone.

Nearby PRO

Nearby is Client Mode: one Air Drive acting as a client of another, phone-to-phone over the local network — no computer involved.

  • The Nearby screen lists other Air Drives discovered on the network via Bonjour.
  • Tap one to connect (the owner of the other device approves, or you enter its PIN/password).
  • Browse, download from and upload directly to the other device — a chunked tus upload runs phone-to-phone.
  • Great for getting a video from one phone to another at full Wi-Fi speed, with no cloud hop.

Transfers & the activity log

Air Drive records what happens so you can audit it.

SurfaceWhat it showsWhere
Transfers drawerLive upload/download progress, retry and pauseWeb client, bottom drawer
Transfers tabTransfer history (uploads + downloads, sizes, when)In the app
Activity logConnections, actions and client IPs for every sessionIn the app; CSV export is Pro

CSV export (Pro)

Export the activity log as CSV from the Transfers tab — useful for spotting unexpected clients, or for organisations keeping audit records. With AuditLogEnabled set by MDM, the log is always on and the Owner cannot clear it.

Trash

Deletes from the web client or app aren't instant destruction — they land in a Trash you control.

  • Deleted items are kept for 30 days (with a manifest), then purged automatically.
  • Restore anything back to its original place, or purge early to reclaim space immediately.
  • Trash storage is app-private — it doesn't appear in the Drive root.

iOS integrations

Air Drive behaves like a system citizen: you can start the server and push files without ever opening the app.

IntegrationWhat you can do
WidgetSee server state and start/stop it from the Home Screen.
Control CenterA control toggles the server from any app — swipe down and tap.
Siri & Shortcuts"Turn on Air Drive" via App Intents; build automations (e.g. start the server when arriving home).
Share extensionShare any file from any app straight into the Drive — handed to the app over the App Group, no server needed.
Live Activity / Dynamic IslandSee that the server is running at a glance while using another app.
Files app & Finder USBThe Drive root is exposed as a document provider; browse it from Files, or plug into a Mac and copy over cable.

Settings reference

Every toggle in the app, grouped by screen. MDM-managed keys override these and show as "Managed by your organisation".

Air Drive Settings showing the Pro-gated WebDAV password field and server options
Settings: Pro features live behind gates like the WebDAV password.

Server

SettingWhat it does
Start/StopServes the Drive on the local network; the address + QR appear while running.
PortFixed port (default 8080); hidden when managed.
Device nameShown to clients and used for Bonjour discovery.
HTTPS PROTLS with an on-device self-signed certificate + fingerprint display.
WebDAV password PROEnables mounting; the app re-checks Pro at start as defense in depth.

Access

SettingWhat it does
Access modeApproval (default), PIN or password.
PIN / passwordCredential for the chosen mode; no account, no recovery.
Read-onlyClients browse and download only.
Per-permission togglesUploads, downloads, delete, rename — on/off per session.
Idle timeoutSession lifetime after inactivity (default 30 min; 0 = never).

Files & storage

SettingWhat it does
Default upload folderWhere browser uploads land (Received/ by default).
Trash retentionDeleted items kept 30 days with a manifest; purge or restore any time.
VaultOpen the Vault, export everything (decrypts into the Drive).

Ads & privacy

The free tier shows a full-screen ad on cold launch and on returning from the background, plus an interstitial when the server starts (3-minute cooldown). Ads come from Google AdMob with a consent (UMP) flow where required. Pro never starts the ads SDK — no ad requests, no tracking, no consent form. "Privacy options" appears in Settings where the consent law requires it.

MDM — Managed App Configuration

Air Drive supports Apple's standard Managed App Configuration, so MDM systems (Jamf, Kandji, Mosyle, Microsoft Intune, Fleet, or any tool that can send an com.apple.configuration.managed dictionary) can configure the app over the air — no manual setup on each device. Managed keys override the Owner's settings, the UI marks them "Managed by your organisation", and every value is validated: invalid values are ignored and reported back in com.apple.feedback.managed.

How to deploy

Add an "App Configuration" payload for Air Drive in your MDM and provide keys as a dictionary. The vendor schema is published in AppConfig Community specfile format — appconfig.xml in the app's repository — which most MDM tools can import directly. Keys apply at launch and re-apply live on change.

Full key reference

KeyTypeDefaultEffect
ServerAutoStartBooleanfalseStart the Server when the app opens.
ServerPortInteger8080Fixed port; hides the port setting.
DeviceDisplayNameStringdevice nameName shown to Clients and used for Bonjour.
AccessModeStringapprovalForces the access mode: approval, pin or password.
AccessPasswordStringnoneSets the password when AccessMode is password.
ReadOnlyBooleanfalseClients can only browse and download.
AllowUploads / AllowDownloads / AllowDelete / AllowRenameBooleantrueFine-grained client permissions.
AllowedFileExtensionsArray<String>empty (all)Only these extensions can be uploaded.
BlockedFileExtensionsArray<String>emptyThese extensions can never be uploaded; blocked beats allowed.
MaxUploadSizeMBInteger0 (no limit)Per-file upload limit, enforced at upload finalization.
IdleTimeoutMinutesInteger30Session idle timeout; 0 means never.
RequireHTTPSBooleanfalseServer refuses to start without HTTPS — no silent fallback to plain HTTP.
TLSCertificate / TLSCertificatePasswordData / StringnoneOrganisation-issued PKCS#12 certificate for HTTPS.
AllowWebDAV / AllowGuestLinks / AllowVault / AllowPhotosBridge / AllowClientModeBooleantrueTurn off individual Pro/feature surfaces per fleet.
AuditLogEnabledBooleanfalseAlways record the activity log; the Owner cannot clear it.
UnlockProBooleanfalseGrants Pro on this device — see the note below.
SupportMessageStringnoneShort text shown in Help (e.g. your IT helpdesk line).

Enforcement notes

  • Live application. Changing a key that tightens access while the server runs ends affected sessions — the app applies the change and restarts the listener.
  • Upload caps compose. MaxUploadSizeMB applies on top of the 64 MiB tus chunk cap: a chunk never exceeds 64 MiB, and the finalize step enforces the total-file limit.
  • Extension filtering at the door. AllowedFileExtensions / BlockedFileExtensions are checked when an upload is created; blocked always wins over allowed.
  • No HTTPS downgrade. RequireHTTPS gates server start; with no TLS identity available the start fails with a clear message rather than falling back.

Feedback status

The app reports appVersion, serverState, lastError and proSource under com.apple.feedback.managed whenever the configuration changes — your MDM console can query it to verify roll-out.

About UnlockPro and App Review

The UnlockPro flag is compiled in behind the build setting AIRDRIVE_MDM_UNLOCK_PRO, which ships off: with the default build, a managed UnlockPro=true is ignored and reported as an issue in the feedback dictionary. Apple's guideline 3.1.1 requires paid features to be unlocked via in-app purchase unless the app is distributed as a custom app through Apple Business Manager. Don't rely on UnlockPro until the distribution route is confirmed — for volume purchases, the regular Pro IAP works and AllowVault-style keys control which features a fleet may use.

Suggested fleet policies

GoalKeys to set
Locked-down kiosk deviceAccessMode=password, AccessPassword=…, ReadOnly=true, RequireHTTPS=true, AuditLogEnabled=true, all Allow… flags off except WebDAV if needed
Field photo collectionServerAutoStart=true, AccessMode=pin, AllowedFileExtensions=["jpg","jpeg","heic","png"], MaxUploadSizeMB=100
Team file exchangeAccessMode=password, AllowGuestLinks=false, AllowVault=true, IdleTimeoutMinutes=15, AuditLogEnabled=true

Troubleshooting

The computer can't reach the address

  • Check both devices are on the same Wi-Fi (guest networks often isolate clients — disable "client isolation" or use the main network).
  • Confirm the server is running — the address on the Server screen is only live while it is.
  • Let Air Drive through the iOS Local Network permission (Settings → Privacy & Security → Local Network).
  • Try the numeric address instead of the .local name; some routers block mDNS.

Uploads keep failing for very large files

Uploads are sent in chunks and resume automatically. If a transfer stops, keep the browser tab open and press retry in the transfers drawer. Chunks larger than 64 MB are rejected by design; with MaxUploadSizeMB set, files over the cap are refused at finalization.

I forgot my server password

Settings → Access → set a new one. There is no recovery because there is no account.

The Vault won't open on my new phone

The Vault key never leaves the device it was created on — that's what makes it safe. A backup restore cannot open it. On the old device use Export everything to decrypt into the Drive, move the files, then re-add them to the Vault on the new device.

Mounted WebDAV is slow or drops

WebDAV over Wi-Fi tops out around your network's throughput (on-device testing has measured 10–16 MB/s). Turn on HTTPS only if you need it; compare with a browser upload on the same network to rule out the network itself. Reconnect from the file manager if the volume unmounts after an idle timeout.

A managed setting shows "Managed by your organisation"

Your MDM has set that key and it overrides local settings. Contact your administrator — the app cannot override a managed value.