Share a File with a Tokenized Link
Tokenized (signed) links let you share a private file without making the whole bucket public. Each link carries a cryptographic token and an expiry time — once it expires, the link stops working.
Generate a signed link
- Open the bucket in Storage and locate the file.
- Open the file's actions menu and choose Generate Signed URL.
- Set an expiry — minutes, hours, or days.
- Click Create Link and copy the URL.
Anyone with the link can download the file until it expires. No CDNShark account or API key is required to open it.
Choosing an expiry
| Expiry | Good for |
|---|---|
| 15–60 minutes | One-off downloads and sensitive documents |
| 1–7 days | Sharing with a client or teammate |
| 30 days | Long-lived embeds where the file rarely changes |
Security notes
- Signed links are validated at the edge — an expired or tampered token returns
403 Forbidden. - Treat a signed link like a password: anyone who has it can download the file until it expires.
- To revoke access before expiry, rotate the bucket's access key — this invalidates all outstanding links.