Vault uses authenticated API requests for private file operations and creates temporary access URLs when files need to be previewed or downloaded.
- Private files require account access.
- Public files use public slugs and share URLs.
- Upload and preview flows validate URLs before using them in the browser.
- Uploads block risky file types and unsafe extensions.
- Metadata can be encrypted or safely hydrated before display.
- Owner checks control whether rename, move, share, and delete actions are available.
Important
A public link changes who can view a file. Keep sensitive files private.