Frequently asked questions

Stashr is a free, privacy-focused file-sharing service. Upload any file, get a shareable link within seconds, and send it to anyone, no account required. You can optionally add a password, client-side encryption, an expiry date, or a download limit for extra control. There's also P2P Transfer, which sends a file straight from one device to another without storing it anywhere.

No. Uploading and sharing work fully without an account. An account is optional and simply adds a dashboard to track your uploads, see download counts, and keep your links organised in one place.

Almost anything, images, documents, archives, audio, video, and more. For safety, a small set of executable types (.exe .msi .bat .cmd .com .scr .pif .vbs .js .jse .wsf .wsh .ps1 .dll .sys .drv .lnk .url .hta .cpl .msc .jar .reg) are blocked. If you need to share one, place it inside a ZIP archive first and it will upload without issue.

Yes, completely free, with no premium tiers, paywalls, or locked features. Everything, including encryption, is available to everyone at no cost.

There's no cap on the total number of files you share over time. To stop spam and abuse, there is a limit on how many uploads you can make per hour from one connection, ordinary use will never reach it. Each individual file can be up to 1 GB.

Yes. You're welcome to share work files, builds, media, and deliverables, as long as the content follows our Terms of Service. For higher-volume or branded needs, reach out via our contact page.

Yes, we're open to promotional partnerships. If you're interested in promoting your website or service on Stashr, feel free to reach out via the contact page to discuss options and pricing.

Each file can be up to 1 GB. If yours is larger, compress it with 7-zip/WinRAR or split it into parts first. When you upload several files at once they're bundled into one ZIP, which must also stay under 1 GB. This cap applies to uploads only, P2P Transfer has no size limit because nothing is stored.

Up to 15 files in a single upload. When you select more than one, they're automatically packed into a single ZIP archive, so you share one tidy link instead of many.

Yes. Pick a folder or drag one onto the upload area, and Stashr zips its contents, keeping the folder structure intact inside the archive, then uploads it as one file.

Yes. Paste a direct file URL into the "Upload from URL" field and Stashr fetches and hosts it for you, useful when the file already lives on another server and you'd rather not download it first.

You might have tried to upload a file with a blacklisted file extension (.exe .msi .bat .cmd .com .scr .pif .vbs .js .jse .wsf .wsh .ps1 .dll .sys .drv .lnk .url .hta .cpl .msc .jar .reg). Uploads are also refused if the exact file was previously removed for breaking our Terms. Anything else is accepted.

Most failures come from an unstable connection, a browser extension or ad blocker interfering with the request, or a file over the 1 GB limit. Switch to a stable network, pause your ad blocker for the site, check the file size, and try again.

Stashr relies on IP-based rate limiting to prevent spam and abuse. VPNs and proxies allow users to constantly switch IP addresses, which makes it possible to bypass these limits. To keep the service fair and reliable for everyone, uploads from VPNs and proxies are not permitted. You can still browse and download files while using a VPN.

No. Anyone with the link can download, no account or sign-up. If you added a password, they'll simply enter it to unlock the file.

While uploading, you can cap how many times a file may be downloaded (1, 5, 10, 25, 50, or 100). Once the cap is hit, the link stops working and the file is no longer reachable, ideal for one-time or limited shares.

Yes, on every download page there is a counter which shows you how many times people have downloaded a file

Anyone holding the link can pass it along, since access is link-based. To stay in control, add a password, a download limit, or an expiry time so the link can't circulate indefinitely.

A clean download page showing the file name, size, and a download button, with an in-browser preview for supported types. They never see your account details. For encrypted files, they're asked for the password before anything can be opened.

A link stops working once the file has expired, reached its download limit, or was removed for a Terms violation. Expiry and limits are chosen by the uploader at upload time and can't be extended afterward.

It sends a file straight from your device to another one, without uploading it anywhere first. You pair the two devices with a six-digit code, and the file travels directly between the two browsers over an encrypted connection. Nothing is stored, so there's no link to share and nothing to expire.

Use P2P when the other person is available right now and you'd rather the file never sat on a server, for example moving something between your laptop and your phone. Use a normal upload when the recipient should be able to grab it later, when you want a link you can send by message or email, or when you need a password, expiry, or download limit.

No, and not in a "we promise not to look" way, the files genuinely never reach us. We only help the two devices find each other; after that the connection is direct. We never learn the name, size, type, or contents, which also means we can't recover a transfer, resend it, or hand it over to anyone.

No. The 1 GB cap applies to uploads, not to direct transfers, because we're not storing anything. The practical limits are that the receiving device needs room for the file and both devices must stay connected until it finishes.

Yes. Since the file is never parked on a server, both sides need the page open while it transfers. If a tab closes, the connection drops, or a device goes to sleep, the transfer stops and has to be started again from the beginning.

Codes are valid for 15 minutes and let in a maximum of two devices, so an expired code or a room someone else already joined will be refused. If the code is accepted but the transfer never starts, the two devices probably can't reach each other directly, which some office networks, strict firewalls, and mobile carriers block. Being on the same Wi-Fi usually solves it.

Yes. Any direct connection means the two devices have to reach each other, so they see each other's network address, and public STUN servers run by Cloudflare and Google see it too while the connection is being set up. That's the trade-off for never routing your files through anyone else. Only pair with people you trust, and use a normal upload if you'd rather stay anonymous to the recipient.

Yes. Direct browser-to-browser transfers are encrypted in transit by default, so nobody on the network in between can read what's being sent. Note this protects the connection, not the file itself, if you want the file to stay unreadable even to the person receiving it, use client-side encryption with a normal upload instead.

By default, files are kept indefinitely. While uploading you can set an expiry, from 1 hour up to 30 days, after which the file is deleted automatically. You can also, or instead, set a download limit.

It's removed and the link stops working permanently, there's no grace period and expired files can't be recovered. Keep a local copy of anything you might need again.

Yes, you can combine them, for example "available for 7 days or 10 downloads, whichever comes first." Whichever limit is reached first ends access to the file.

If you have an account and uploaded while logged in, you can delete files from your dashboard. For anonymous uploads, you can set an expiration date or download limit when uploading. If you need an anonymous file removed, contact us with the file link.

No, files cannot be modified after upload. This ensures that the file recipients download is exactly what was originally uploaded. To share an updated version, upload the new file and share the new link.

No. Your file is stored and delivered exactly as you uploaded it, byte for byte, no re-compression, conversion, or quality loss. The only exception is a multi-file upload, which is bundled into a ZIP.

Files are stored on secure servers with encrypted storage. We use a content delivery network (CDN) to ensure fast download speeds regardless of your location.

Client-side encryption means your files are encrypted in your browser before being uploaded. The encryption password never leaves your device, so only you and people you share the password with can decrypt the file. We use AES-256-GCM encryption.

Password protection prevents downloads without the correct password, but the file itself is stored unencrypted. Client-side encryption encrypts the actual file contents - even if someone accessed the file directly, they would only see encrypted data without the decryption password.

Yes, they're independent options you can switch on together for layered protection. Password protection blocks the download, while client-side encryption makes the file's contents unreadable without the decryption key.

Send the link as normal, then share the encryption password through a separate channel, a different app, a call, or in person. The recipient enters it on the download page to decrypt the file in their browser. Avoid putting the password in the same message as the link.

No. Encryption passwords are never sent to our servers, so we cannot recover them. Without the correct password, the encrypted file cannot be decrypted. Make sure to save your password in a secure location before encrypting important files.

Encryption adds a small amount of processing time on your device before upload and after download. For most files this is barely noticeable. Larger files (100MB+) may take a few extra seconds to process.

With an account you get access to a dashboard where you can view all your uploads, see download statistics, and manage your files. Your uploads while logged in are saved so you won't lose track of your links.

Just a username and password. Email is optional and only used for password recovery if you choose to provide it.

No, accounts are free, like the rest of Stashr. There are no paid plans and no separate fees for using your dashboard.

No. If you provide an email, it's used only for password recovery and essential account notices. We don't send marketing and we never sell or share it. See our Privacy Policy for details.

If you provided an email address during registration, you can use the password reset function on the login page. If you haven't linked an email address to your account and can't reset your password the usual way, please contact us with proof that you are the account owner so that we can reset your password and grant you access to your account.

No, anonymous uploads cannot be linked to an account retroactively. Only files uploaded while logged in will appear in your dashboard.

You can delete your account from the account settings page. Note that files you uploaded will also be permanently deleted.

Files are unlisted and only reachable through their unique link, there's no public directory, browsing, or search. For anything sensitive, add a password or client-side encryption so the link alone isn't enough to open it.

To run the service and keep it safe, each upload is logged with technical details: your IP address and the file's metadata. This is kept for a limited time and is never sold or used for advertising. We don't use tracking cookies or third-party analytics. The full breakdown is in our Privacy Policy.

Yes. Like virtually every hosting service, we record the uploader's IP address to enforce rate limits and investigate abuse. It's stored for a limited period (30 days) and explained in full in our Privacy Policy.

We comply with valid legal requests to the extent the law requires, and we report clearly illegal material such as child sexual abuse content to the appropriate authorities. For files you encrypted client-side, we can only ever provide scrambled data, without your password it can't be decrypted, even by us.

Dangerous executable types are blocked outright, uploads matching content we've already removed are rejected automatically, and every download page has a Report Abuse button. Reported files are reviewed and taken down if they break our Terms. We don't otherwise scan or read your files.

No automated scanning, no AI analysis, no human review unless a file is reported. We don't look at your files, we don't analyze them for advertising, and we don't build profiles based on what you upload. For encrypted files, we couldn't look even if we wanted to. We only review content when someone files an abuse report, and even then we only check if it violates our terms.

Every download page has a "Report Abuse" button. Select the appropriate reason and submit. We review reports and remove content that violates our terms of service.