Files for a contractor, no account needed
A share link opens selected files from one environment for someone outside your organization. The decryption key lives in the part of the address after the #, which browsers don’t send to the server.
- The key never reaches the server
- Expiry, view limit and password
- Chat previews don’t use up a view
A link that carries its own key
You pick which files of the environment the link opens. The key sits after the # in the address, and only the recipient’s browser reads it; the contents are signed with the link’s key, so tampering shows.
- Selected files onlyThe recipient sees the files you chose and nothing else from the environment.
- The fragment stays in the browserBrowsers never send the part after the # to a server, so the server stores ciphertext it can’t open.
- Signed contentsThe recipient’s page checks the signature and shows owner’s signature verified.
Expiring or live, with or without a password
An expiring link has a time limit of up to 365 days and a view limit of up to 1,000, down to a single view. A live link shows the latest version of the files until you revoke it.
- PasswordWithout it, the ciphertext can’t even be downloaded, and guessing is possible only online, under rate limits.
- A daily limitUp to 100 new links per account per day.
- Off for restricted environmentsA network-restricted environment can block share links entirely.
Opened once, then it stops working
A view counts only when the recipient clicks Open, so a chat app’s link preview doesn’t use it up. Decrypted files live only in the page’s memory, and Close and wipe from memory clears them.
- Install on a computerThe recipient can download an install script: files get mode 0600, the old version is kept as
.prev, and checksums are verified. - Status and viewsSee each link’s status and view count, and revoke it at any time.
- In the audit logCreating, opening and revoking a link are recorded.
Once it’s open, it’s open
A share link is the most direct way to hand over a value, and that cuts both ways.
- Opened means deliveredRevoking stops future views only. If the values must stop working, reissue them at the provider.
- The link is the secretAnyone with the full address, and the password if you set one, can open it.
- The server sees that it existsWhen it was created, how often and when it was viewed, but not what’s inside.
- Not a guest accountRecipients can’t edit, see other files or ask for more. For ongoing work, invite them as a member.
Answers to common questions
Something else? Write to support@crunu.com
Does the recipient need a Crunu account?
No. They open the link in a browser.
Will a chat app’s link preview use up a single-view link?
No. A view counts only when the recipient clicks Open.
Can Crunu read the files I share?
No. The key is in the part of the address after the #, which never reaches the server. The server stores only ciphertext.
What’s the difference between an expiring link and a live link?
An expiring link stops working after its time or view limit. A live link has no expiry: the recipient sees the latest version of the files until you revoke it.
Can I see whether the link was opened?
Yes. Each link shows its status and view count, and opening it is recorded in the audit log.
Stop pasting keys into email
Create an account, put the file in an environment and send a single-view link instead.