Skip to content

Files for a contractor, no account needed

A share link opens selected files from one environment for someone outside your organization. The decryption key lives in the part of the address after the #, which browsers don’t send to the server.

  • The key never reaches the server
  • Expiry, view limit and password
  • Chat previews don’t use up a view
Example. Kiteline is a fictional company.

A link that carries its own key

You pick which files of the environment the link opens. The key sits after the # in the address, and only the recipient’s browser reads it; the contents are signed with the link’s key, so tampering shows.

  • Selected files onlyThe recipient sees the files you chose and nothing else from the environment.
  • The fragment stays in the browserBrowsers never send the part after the # to a server, so the server stores ciphertext it can’t open.
  • Signed contentsThe recipient’s page checks the signature and shows owner’s signature verified.

Read the docs

Example. Kiteline is a fictional company.

Expiring or live, with or without a password

An expiring link has a time limit of up to 365 days and a view limit of up to 1,000, down to a single view. A live link shows the latest version of the files until you revoke it.

  • PasswordWithout it, the ciphertext can’t even be downloaded, and guessing is possible only online, under rate limits.
  • A daily limitUp to 100 new links per account per day.
  • Off for restricted environmentsA network-restricted environment can block share links entirely.

Read the docs

Example. Kiteline is a fictional company.

Opened once, then it stops working

A view counts only when the recipient clicks Open, so a chat app’s link preview doesn’t use it up. Decrypted files live only in the page’s memory, and Close and wipe from memory clears them.

  • Install on a computerThe recipient can download an install script: files get mode 0600, the old version is kept as .prev, and checksums are verified.
  • Status and viewsSee each link’s status and view count, and revoke it at any time.
  • In the audit logCreating, opening and revoking a link are recorded.
Example. Kiteline is a fictional company.

Once it’s open, it’s open

A share link is the most direct way to hand over a value, and that cuts both ways.

  • Opened means deliveredRevoking stops future views only. If the values must stop working, reissue them at the provider.
  • The link is the secretAnyone with the full address, and the password if you set one, can open it.
  • The server sees that it existsWhen it was created, how often and when it was viewed, but not what’s inside.
  • Not a guest accountRecipients can’t edit, see other files or ask for more. For ongoing work, invite them as a member.

All known limitations