Share a file with a secure link

A secure link lets someone download one file from your Secure Files without a Magpie account. The file stays encrypted on Magpie; the recipient's browser decrypts it.

Create a link

1. In Secure Files, choose More beside the file, then Share securely.
2. Choose when the link expires: in 1 hour, 1 day, 7 days or 30 days. It expires after 7 days unless you choose otherwise.
3. Choose the download limit: Unlimited, or One download.
4. To require a passphrase, tick Require a passphrase and enter one of 12 to 256 characters.
5. Select Create secure link, then Copy link, and send the link to the recipient. Give them the passphrase separately, such as by phone or another app; it is not part of the link.

Copy the link before closing the drawer. Magpie shows the complete link only once, because it cannot recover the decryption secret. The secret is after the # in the address. The recipient's browser reads it there; browsers do not send that part of the address to Magpie. The link's separate ID lets Magpie find the encrypted file and enforce its expiry, download limit and revocation.

What the recipient sees

The recipient opens the link and sees Secure file shared with you. If the link has a passphrase, they enter it and choose Unlock file. They then see the file's name, size and expiry date, and choose Download and decrypt. They need both the complete link, including the part after #, and the passphrase.

The page locks after 15 minutes without activity and clears the decryption key. Reopening the original complete link opens the file again, while the link is still active.

A one-download link stops accepting new downloads when a recipient starts one. That transfer can finish for up to two hours. The link counts the server's download authorization; it cannot prove the recipient opened or saved the decrypted file. An interrupted transfer still uses that authorization, so create a new link if the download did not finish.

See and revoke links

Share securely also lists the file's links under External links, each with when it was created, when it expires and how many downloads it has had, and whether it is active, expired, revoked or has reached its download limit.

Choose Revoke beside a link to stop access immediately, including a transfer in progress. Moving the file to Trash also revokes its links. Neither removes a copy someone has already downloaded. Revoking or expiring a link stops new downloads; the encrypted file stays in your Secure Files.

How the link is protected

The browser encrypts the file key for the link. Magpie stores the encrypted file and the wrapped key, not the link secret, passphrase, file key or plaintext file. If you set a passphrase, the browser uses Argon2id to protect the key with it as well as with the link secret.

In the Magpie app

Touch and hold a file, then choose Share securely. The app offers the same expiry, download limit and passphrase choices. It shows the complete link once, with Share link and Copy link, and lists the file's links so you can revoke one by swiping it. A passphrase is processed with Argon2id on your phone, which can take a few seconds.

For help with secure links, Contact support.