Encrypted Sharing Links with Preview and Approval

Share any encrypted file with a time-limited, password-optional link. Recipients download and decrypt without an API key — zero-knowledge end-to-end.

Share encrypted files without sharing encryption keys.

Encrypted Sharing Links turn any Arweave-stored file into a shareable, time-limited, password-optional download — without exposing decryption keys or requiring the recipient to create an account.

Value

Zero-knowledge key exchange

Recipients never see or handle encryption keys. The server decrypts on their behalf through a one-time token — eliminating the weakest link in most sharing workflows.

Built-in access controls

Password protection, email whitelists, download limits, and mandatory expiry — all configured at link creation time.

Complete audit trail

Every access attempt is logged with IP, timestamp, and user-agent. Revoke any link instantly and the token is invalidated in operational state.

How it works

Authenticate and select file

Call POST /shares/create with the Arweave txId, expiry window, optional password, and email whitelist.

Server generates share token

A unique UUID token is created and stored with TTL in operational state. The share URL is returned immediately.

Recipient opens share URL

The public endpoint validates token, expiry, download limit, and optional password — no API key needed.

Server decrypts on behalf

The file is downloaded from Arweave and decrypted using stored IV/authTag/salt. Zero-knowledge key exchange.

Use cases

Board Materials

Share confidential board decks with external directors. Password-protected, time-limited, download-tracked.

Client Deliverables

Send encrypted audit reports or legal documents to clients without forcing them to create an account or manage keys.

Cross-Team Handoffs

Share supply chain documents between logistics partners. Each recipient gets a unique link with independent expiry and download limits.

Security guarantees

Zero Key Exchange

Recipients never see or handle encryption keys. The server decrypts on their behalf through a one-time token.

Time-Limited by Default

Every share link has a mandatory TTL (5 minutes to 30 days). Expired tokens are purged from operational state automatically.

Full Audit Trail

Every access attempt is logged — IP, user-agent, timestamp, email. Revoke any link instantly and the token is deleted.

For operators

• Use share links for external file delivery without provisioning API keys for every recipient.
• Configure per-link expiry, download caps, and optional passwords for tiered access control.
• Monitor access logs to track who downloaded what and when — exportable for compliance.

For buyers

• Eliminates the risk of sharing decryption keys through insecure channels like email or Slack.
• Gives regulated industries an auditable, time-limited sharing mechanism for external counterparties.
• Reduces integration friction — recipients click a link, no SDK or account required.

Can I revoke a share link before it expires?

Yes. DELETE /shares/:shareId immediately invalidates the token. Any subsequent download attempt returns 404.

Does the recipient need an API key?

No. The download endpoint is public, authenticated only by the share token. Optional password and email whitelist add extra layers.

What happens when the download limit is reached?

The endpoint returns 410 Gone. The share metadata is preserved for audit but the token stops working.