Guides / Share links and file requestsMenu

Share links and file requests

Send a file or folder to anyone with a link, or let them upload files to you, without an SFTP account.

Not everyone you work with has an SFTP client. Share links let you hand someone a plain web link instead:

  • A share link lets anyone with the link download a file, or browse and download the files in a folder. They can’t change anything.
  • A file request (an upload link) lets anyone with the link drop files into a folder from their browser. They can’t see what’s already there, and nothing is ever overwritten: if a file with the same name exists, the new one is saved as report (1).pdf.

Both work on every plan, while the server is running.

  1. Open the server’s Files tab and pick a user.
  2. Open the menu on a file or folder (or right-click it) and choose Create share link…, or Request files… for a folder. To share the folder you’re in, use Share in the toolbar.
  3. Choose when the link expires (1 day, 7 days, 30 days or never) and, if you like, a password. For file requests you can also limit the size of each file.
  4. Copy the link and send it.

Links point at a path in that user’s space, and they only ever reach what’s inside it. If the file or folder is renamed or deleted, the link stops working. Deleting the user removes their links too.

All links for a server are listed under Share links in the Files tab, with how often they were used. Copy a link again from there, or revoke it; a revoked link stops working at once.

Uploads through a file request count against the user’s quota and are capped at 5 GB per file. Downloads and uploads through links appear in the server’s logs with the protocol Link and the visitor’s IP address, and they trigger event listeners like any other upload or download.

Passwords

A password is asked for once per browser; after that the link stays unlocked for 12 hours. Passwords are stored hashed, so we can’t show them again. Repeated wrong guesses are slowed down.

Anyone who has the link (and the password, if set) can use it, so treat links like the files themselves: pick a short expiry for sensitive data and revoke links you no longer need.

API

Share links can be listed, created and revoked through the API at /api/v1/instances/{id}/share-links.