Home
/Review the transfer service and start upload or sign-in.
Viaport creates time-limited zero-knowledge file transfers. Files and metadata are encrypted in the sender's browser, and the decryption key stays in the URL fragment rather than being sent to the storage service.
Create and receive zero-knowledge encrypted file transfers while protecting the complete link, password, and deletion settings.
Covers the live Viaport v1 browser workflow for one-file encrypted transfers, expiry, download limits, password protection, recipient-device mode, sender dashboard, and deletion. Viaport is not shared storage, a folder workspace, or a versioned collaboration service.
| Role | Access | Responsibilities |
|---|---|---|
| Sender | Encrypt and upload a file and manage owned transfers. |
|
| Recipient | Decrypt and download with the complete link or approved recipient-device flow. |
|
| Support | Diagnose service metadata and transfer state without possessing the fragment key. |
|
The browser generates the key and encrypts file content and metadata before upload; losing the fragment loses access.
Choose the minimum lifetime and download exposure needed for the purpose.
Confirm recipient, classification, size, malware checks, and that a retained source copy exists.
Select the file and review its displayed identity.
Choose 1, 3, 7, 14, or 30 days according to the shortest approved transfer window.
Use delete-after-download or a maximum download count when compatible with the recipient workflow.
Use a unique transfer password and plan a separate delivery channel.
Keep the page open while key generation, encryption, and upload complete.
One encrypted transfer is stored and the browser displays a complete share link and expiry.
Verify the fragment-bearing link before giving it to the recipient.
Include everything after #; the fragment contains or unlocks the decryption material and is not sent to the server.
Open it in a private browser and confirm filename/metadata decrypts without consuming a one-time download unnecessarily.
Deliver only to the intended recipient and avoid systems that strip URL fragments.
Do not place the transfer password in the same message as the link.
Have the recipient confirm the file identity, not resend the complete link.
The intended recipient receives a tested complete link, while any password travels separately.
Download on the intended device, verify the file, and remove the transfer when the business purpose ends.
Use the complete link and verify the result before relying on the file.
Use the intended browser/device and preserve the # fragment.
Use the separately received password; do not send it back through the link channel.
Confirm sender context, filename, expiry, upload time, and download state.
Allow encrypted download, browser decryption, and local save to finish.
Check file identity, expected content, and integrity through the approved method.
Place it in approved storage or remove the temporary copy according to policy.
The intended file is decrypted locally and handled under its original classification.
Use the dashboard to inspect current limits and remove access early.
Sign in and locate the transfer by decrypted name and creation time.
Check expiry, download count, maximum downloads, and delete-after-download state.
Ask whether the recipient still requires access.
Use Delete and verify the transfer disappears.
The sender understands remaining exposure or removes the transfer before natural expiry.
Complete the device-bound flow on the intended linked device.
Recipient mode may legitimately have no URL fragment.
Do not attempt standard fragment decryption when the page identifies a device transfer.
Use only the client and device specified by the organization.
Do not copy keys or attempt to bypass device binding.
The transfer is opened only through the intended recipient-device mechanism or is safely escalated.
These limits describe the source-pinned Viaport live frontend 1.0.0 beta scope and must be rechecked when the product changes.
Likely cause: The session expired, the identity is not assigned to the application, or the tenant claim is missing.
Likely cause: The current role, release, tenant configuration, or feature flag does not expose that operation.
Likely cause: Validation failed, processing is still running, or the current view is stale or filtered.
Likely cause: The # fragment was stripped, copied incompletely, altered, or belongs to another transfer.
Likely cause: The configured lifecycle condition has been reached or the sender removed it.