How to share files by link safely

Sharing by link is convenient precisely because it needs no account and no password. That same simplicity defines the care required from both sender and recipient.

The link is the key

Every file uploaded to fstmp gets a random 128-bit identifier. There is no public catalog, file pages ask search engines not to index them, and guessing an address is not feasible in practice.

Protection ends there: whoever has the link opens the file. If the address is pasted into a group, forwarded or published, all of those people have access until it expires.

What not to upload

Do not use public links for identity documents, passwords, banking details, medical results or other people's information without permission. That kind of content belongs in a channel with per-person access control.

Remember that the file name is shown to anyone who opens the link. Avoid putting personal details in it, such as ID numbers, addresses or other people's full names.

Protect the content before sending

When a sensitive file really must travel by link, encrypt it first. 7-Zip creates archives protected with AES-256; in the 7z format the file names can be hidden as well. PDF editors and office suites offer password protection when exporting.

Send the password through another channel, such as a phone call or a different app. fstmp does not inspect the inside of compressed archives, so encrypted content stays opaque to the service.

When you receive a link

Confirm with the sender if you were not expecting the file, especially when the message demands urgency. fstmp blocks executables, installers and scripts, but no service can guarantee that a document is harmless.

Be wary of documents that ask you to enable macros or editing, keep your browser and PDF reader up to date, and prefer the in-browser preview over downloading when you only need to take a look.

Expiry and removal

Files stay available for 30 days and are deleted automatically. There is no button to delete earlier, so take that period into account when deciding what to upload.

If a file exposes your data or infringes rights, open the link and use Report file, stating the reason. The report reaches the operator for review; it does not remove the file automatically.