Encrypted before upload
Your file is encrypted in your browser before it reaches Uploadir.
Share confidential files with end-to-end encryption
Files are encrypted in your browser before upload. Add an optional password, set an expiry or limit access to one successful download.
Included with Plus, Pro and Max · Files up to your plan’s file limit
Large encrypted files work best in the latest Chrome or Edge on desktop.
Optional password
Add another layer of protection before the file can be downloaded.
Custom expiry
Choose when the encrypted file and its link are permanently removed.
One-time access
Allow one successful download before the encrypted share is permanently consumed.
When to use it
Built for confidential documents
Use encrypted sharing when a file contains private, commercially sensitive or personal information that should not be exposed during upload, storage or delivery.
Legal and professional documents
Contracts and agreements · Court documents
Financial information
Bank statements · Tax documents
Identity and personal documents
Passports · Proof of address
Business and client information
Client records · Confidential proposals
Employment and HR files
Employment contracts · Salary information
Health and care documents
Medical reports · Test results
It can also be useful for case files, signed forms, private invoices, payroll and accounting records, immigration documents, internal reports, product specifications, personnel and care records.
How it works
Three steps from file to recipient
- 1
Select and encrypt
Choose a file and Uploadir encrypts it locally in your browser before upload.
- 2
Choose your access controls
Add an optional password, set an expiry or allow only one successful download.
- 3
Share the private link
Send the complete link to your recipient. It contains the decryption key, and the file is decrypted locally in their browser.
Access options
Choose how the encrypted share works
Expiring encrypted share
Best when the recipient may need to download the file more than once.
- Preset or custom expiry
- Available until the selected expiry
- Can be disabled manually
- Permanently deleted at expiry
One-time encrypted share
Best when the file should only be successfully downloaded once.
- Opening the page does not consume the share
- The recipient deliberately starts the download
- Permanently consumed after one successful download
- Cannot be retrieved again using the same link
Encryption explained
How your file stays private
Uploadir stores and delivers encrypted data while encryption and decryption happen in the sender’s and recipient’s browsers.
- Client-side encryption
- The file is encrypted locally in the sender’s browser before upload.
- AES-256-GCM
- Each encrypted share uses authenticated AES-256-GCM encryption.
- Unique encryption key
- Each encrypted share receives its own randomly generated encryption key.
- Private URL fragment
- The decryption key is carried in the private fragment of the complete link and is not sent to Uploadir’s servers as part of the normal HTTP request.
Losing the complete link will make the file impossible to decrypt.
View detailed security implementation
- Hashed one-time claim tokens
- Uploadir stores a cryptographic hash of a one-time claim token rather than the raw token.
- Atomic one-time claims
- An atomic server operation prevents two simultaneous requests from both claiming the same one-time encrypted share.
- No reusable storage URL
- One-time encrypted shares do not expose a reusable storage URL that continues working after consumption.
- Cache control
- Encrypted-share pages and protected responses use no-store cache controls.
- Logging and analytics restrictions
- The decryption key remains in the link fragment, outside the normal server request. Operational error handling redacts URLs and configured secrets; complete private links should not be submitted to analytics or support logs.
- Permanent deletion
- The encrypted file is deleted after expiry, manual disablement or successful one-time consumption.
- Password-derived protection
- When a password is added, the recipient must provide it before the server accepts a download claim. Password verifiers are derived with scrypt; the password is not stored in readable form.
What encrypted sharing cannot prevent
End-to-end encryption protects the file while it is uploaded, stored and delivered. It cannot control what an authorised recipient does after downloading it or protect a device that is already compromised.
For one-time shares, a failed connection or closed browser may require the sender to create a new encrypted share.
Common questions
Frequently asked questions
Which plans include end-to-end encrypted sharing?
Plus, Pro and Max include end-to-end encrypted sharing. It is not included with the Free plan.
What is the maximum encrypted file size?
Encrypted sharing supports files up to your plan’s file limit, subject to the included plan limit.
Can I add a password?
Yes. Add an optional password alongside expiry or one-time access. The recipient must enter it before the download can begin.
What happens when an encrypted share expires?
At the selected expiry, Uploadir permanently deletes the encrypted share, including its encrypted file, and the link stops working.
What happens after a one-time download?
After one successful download, the encrypted share is permanently consumed and deleted. The same link cannot retrieve it again.
Does expiry delete the uploaded encrypted file?
Yes. Expiry permanently deletes the encrypted file held for that encrypted share. It does not delete a separate copy on the sender’s or recipient’s device.
Can Uploadir decrypt the file?
Uploadir does not receive the decryption key as part of the normal HTTP request. The recipient’s browser uses the key from the complete private link to decrypt the file locally.
What happens if I lose the complete link?
Losing the complete link will make the file impossible to decrypt.
Can the recipient download the file more than once?
An expiring encrypted share can be downloaded more than once until expiry or manual disablement. A one-time encrypted share allows one successful download.
Which browsers are supported?
The encrypted-sharing flow uses modern browser capabilities. Large encrypted files use the direct-file-access flow supported by the latest Chrome and Edge on desktop.
Ready to share a confidential file?
Create an end-to-end encrypted share with your choice of password, expiry and one-time access.