HTTPS for uploads and downloads
Files are transferred over HTTPS rather than being sent in plaintext across the network.
SecureUploads.ca is built to make temporary file delivery feel safer and calmer. The trust model is straightforward: HTTPS in transit, optional passwords, one-time download behavior, and automatic expiry. It does not claim client-side zero-knowledge encryption.
If your use case requires end-to-end encryption where the server cannot ever read the file contents, you should encrypt the file locally before you upload it here.
Files are transferred over HTTPS rather than being sent in plaintext across the network.
You can require a password before the file is downloaded. Passwords are stored as hashes instead of raw plaintext.
Links are designed for temporary delivery: they stop working after the first successful download or when the chosen timer ends.
Download pages are marked not to be indexed by search engines, and password attempts are rate-limited.
SecureUploads is not client-side end-to-end encrypted. If you need zero-knowledge protection, encrypt the file yourself before uploading it.
Anyone with the link can access the download page unless you also set a password.
The service is designed for one file per upload and temporary delivery, not shared folders or permanent archival storage.
Once a file is downloaded or expires, it is not recoverable through the product interface.
Add a password for anything sensitive and send that password in a separate channel.
Use custom slugs only when you need a memorable link. Otherwise, leave the slug blank for a generated one.
If the file is highly sensitive or regulated, encrypt it locally before uploading and communicate the decryption method out-of-band.