Per-file encryption
Each file is encrypted with its own 256-bit key using XChaCha20-Poly1305. Keys are wrapped by a master key, so stolen disks reveal nothing.
Encrypted at rest · Zero plaintext on disk
Share huge files.
Share huge files.
Keep every byte private.
Inferno Link is a private file-sharing platform built for teams that move large, sensitive data. Every file gets its own encryption key, every link is unguessable, and every access is accounted for.
- XChaCha20-Poly1305
- Mandatory 2FA
- Cloudflare-protected
- Resumable uploads
384-bitrandom share tokens
256-bitunique key per file
1 MiBindependently authenticated blocks
0plaintext bytes written to disk
Features
Everything you need to move sensitive data — nothing you don’t.
Designed around one idea: large files should be easy to send and impossible to snoop on.
Built for huge files
Parallel, chunked uploads with SHA-256 verification per chunk. Pause, lose your connection, resume exactly where you left off.
Unguessable links
64-character cryptographic tokens. Only a hash is stored, and downloads use short-lived, IP-bound signed URLs.
Granular link controls
Passwords, expiry dates, scheduled activation, download limits, single-use links, IP / CIDR and country allowlists.
Groups & permissions
Role-based groups with fine-grained permissions, per-group file-size limits, allowed extensions and maximum link lifetimes.
Per-user quotas
Default quotas per group, overrides per user and atomic quota accounting — space is reserved the moment an upload starts.
Complete audit trail
Sign-ins, 2FA events, admin actions, uploads and every link view or download — with IP and country.
Instant previews
Stream images, video, audio and PDFs in the browser with range requests — decrypted on the fly, sandboxed by CSP.
Chrome extension
Upload from any tab, right-click to send images and links, and get a share link on your clipboard automatically.
How it works
From drop to delivery in three steps.
-
01
Upload
Drop files in the panel or the Chrome extension. They’re split into chunks, hashed and sent over several parallel streams.
-
02
Encrypt
Each chunk is sealed into authenticated blocks with the file’s own key before it ever touches the disk.
-
03
Share
Create a link with exactly the rules you need. Recipients get a clean download page — no account required.
Security
Defense in depth, by default.
Security isn’t a setting you have to remember to turn on. Every layer — from the network edge to the bytes on disk — is locked down out of the box.
Argon2idTOTP 2FAHMAC-SHA256Strict CSPHSTS preloadWAF
Envelope encryption
Random per-file keys, wrapped by a master key. Block numbers are bound into the authentication data, so blocks can’t be reordered or truncated.
Mandatory two-factor sign-in
Username sign-in with Argon2id passwords and Google Authenticator. Codes can’t be replayed, and one-time recovery codes are issued.
IP-restricted administration
The sign-in screen is reachable only from approved networks — enforced in the application and as a Cloudflare WAF rule.
Origin locked behind Cloudflare
Direct-to-origin traffic is refused. Real client IPs are verified against Cloudflare’s published ranges.
Signed, IP-bound downloads
Every download URL is signed, short-lived and only valid for the visitor’s IP address. Download limits are enforced atomically.
Brute-force & abuse protection
Account lockouts, rate limits on sign-in, link passwords and API tokens, plus a cookie-free download domain.
Link controls
Decide exactly who gets in — and for how long.
Every share link carries its own policy. Combine rules freely, revoke instantly, and watch each view and download in a per-link access log.
- Single-use links that self-destruct after the first download
- Scheduled activation for embargoed releases
- Network and country allowlists for regulated data
- One-click disable, re-enable or delete
Chrome extension
Upload from anywhere in your browser.
Drag files into the extension, paste from the clipboard or right-click an image, video or link to send it straight to Inferno Link. When the upload finishes, a share link with your preferred rules is already on your clipboard.
- Scoped, revocable API tokens — created with a 2FA code
- Same resumable, parallel upload engine as the web panel
- Quota and recent files at a glance
FAQ
Questions, answered.
How large can a single file be?
There is no fixed technical limit. Files are uploaded in chunks, so multi-hundred-gigabyte transfers work. Administrators can set a maximum file size and storage quota per group or per user.
What happens if my connection drops during an upload?
Nothing is lost. The server keeps track of every verified chunk; the upload resumes from the last completed chunk instead of starting over.
Do recipients need an account?
No. Recipients simply open the link. Depending on the link’s rules they may need a password, a permitted network or a permitted country.
Can the server operator read my files?
Files are never written to disk in plaintext. Each file is encrypted with its own key, and the keys are wrapped by a master key held outside the storage volume, so a copied disk or backup contains only ciphertext.
How are share links protected against guessing?
Each link contains a 384-bit random token. Only a hash of the token is stored, the download URL is signed and bound to the visitor’s IP address, and repeated failures are rate-limited.
Is the interface available in other languages?
Yes. The panel ships in English and Turkish, and each user can switch at any time. Share pages automatically follow the visitor’s browser language.