Stash

Stash

Unlocking the Power of Permanent, No-Expiry File Sharing Links

Why permanent file sharing links matter, when they make sense, how they compare to expiring links, and how to use them securely.

14 min read

You share a file with a client. Three weeks later, they try to download it again and see “This link has expired.” Now you need to re-upload the file, generate a new link, send it again, and hope they download it before the clock resets. Sound familiar?

Link expiration is one of the most frustrating aspects of file sharing. Services like WeTransfer give you 7 days. Smash gives you 14. After that, the link is dead and the file is gone. For quick one-off transfers, this is fine. But for portfolios, client deliverables, reference materials, or anything someone might need to re-access, expiring links create unnecessary friction and rework.

This is where permanent, no-expiry file sharing links change the game.

File sharing services impose link expiration for practical reasons:

  • Storage costs. Keeping files indefinitely costs money. Expiration lets services automatically clean up old files and reclaim storage capacity.
  • Security posture. Shorter link lifespans reduce the window during which a leaked link could be exploited. An expired link is harmless regardless of who has it.
  • Business model. Free tiers with strict expiration push users toward paid plans. The time pressure creates urgency and friction that monetization resolves.

These are valid concerns for the service provider — but they do not always align with what you need as a user.

Not every shared file needs to live forever. Expiring links are the right choice when:

  • The file is highly sensitive and you want automatic deletion as a safety net
  • The transfer is truly one-time — someone downloads once and neither party needs the link again
  • You are sharing with strangers or semi-trusted recipients where limiting the access window reduces risk
  • Storage management is a concern and you want files to self-clean

For confidential legal documents, temporary access codes, or one-off transfers to people you barely know, a 7-day window provides a reasonable balance of access and security.

Permanent links shine in situations where re-access is likely or where the sharing context is ongoing:

Client Deliverables

A photographer delivers a wedding gallery. The couple downloads it immediately, then six months later wants to re-download for an album order. With an expiring link, the photographer must re-upload and re-share. With a permanent link, the couple just clicks the same link.

Portfolio and Reference Materials

A designer shares portfolio samples with a potential client. The prospect saves the email and reviews it two months later when budget is approved. An expired link loses the opportunity. A permanent link closes the deal.

Team Resources

An architect shares building specs with a contractor. The contractor references the files repeatedly over the course of a project. Expiring links require constant re-sharing. Permanent links work like a bookmark.

Documentation and Guides

A consultant delivers a strategy document. The client references it quarterly during planning sessions. A permanent link turns a one-time delivery into an ongoing resource.

Family and Personal Archives

You share vacation videos with extended family. Grandparents re-watch them months later. Cousins discover them a year later. A permanent link means the content is always accessible.

This is the most common concern, and it is worth addressing directly.

The risk: A permanent link can be accessed by anyone who has it, indefinitely. If the link leaks — forwarded accidentally, posted publicly, or obtained through a data breach — the file remains accessible.

The mitigation: This risk is real but manageable. Here is how permanent links can be just as secure as expiring ones:

End-to-End Encryption Neutralizes Server-Side Risk

With end-to-end encryption, the file stored on the server is encrypted and unreadable without the key. Even if an attacker accesses the server, they get only encrypted data. The key exists only in the share link, so the server-side exposure is neutralized regardless of how long the file exists.

The sender decides who receives the link. Share it through a secure channel (encrypted messaging, direct email) rather than posting it publicly. The link is the key — treat it with the same care you would a password.

Manual Deletion Is Available

Permanent does not mean irrevocable. With services like Stash, you can delete the file at any time, which immediately disables the share link. “No expiration” means the link lives as long as you want it to — not forever regardless of your wishes.

Practice the same link hygiene as you would with passwords:

  • Share links only with intended recipients
  • Use encrypted messaging channels when possible
  • Periodically review active links and delete those no longer needed
  • Do not post permanent links in public forums or social media
AspectPermanent LinksExpiring Links (7–30 days)
Re-access convenienceExcellent — works anytimePoor — requires re-upload after expiry
Storage managementManual cleanup neededAutomatic cleanup
Security (with E2E encryption)Strong — encrypted at restStrong — encrypted + time-limited
Security (without encryption)Moderate — dependent on link secrecyModerate — limited window reduces exposure
Client experienceSeamless — one link, always worksFrustrating — expired links require re-delivery
Portfolio/reference useIdealImpractical
Sensitive one-time transfersFine with manual deletionSlightly safer as a default

Stash generates permanent, no-expiry share links by default. Here is why this approach works securely:

  1. Files are encrypted on your device before upload using AES-256-GCM
  2. The encryption key is embedded in the URL fragment (after #), which is never sent to Stash’s servers
  3. The encrypted file lives on the server indefinitely until you choose to delete it
  4. Anyone with the complete link can download and decrypt the file — but only with the complete link
  5. You can delete the file at any time, which immediately and permanently disables the link

This architecture means:

  • The server stores only encrypted data (safe even if breached)
  • The key is in the link (never on the server)
  • The link has no expiration (convenient for re-access)
  • You retain full control (delete anytime)

A wedding photographer delivers 500 edited photos via permanent link. Over the next year:

  • The couple downloads immediately
  • They re-download three months later for prints
  • The bride’s mother accesses the link six months later
  • The couple revisits for their anniversary album

Without a permanent link, the photographer would need to re-upload and re-share at least three times.

Scenario 2: Freelance Design Portfolio

A freelance designer sends portfolio links to five potential clients. Three respond within a week. One responds three months later when a project starts. The fifth saves the email and reaches out a year later.

With expiring links, two of the five clients would see dead links. With permanent links, every prospect can access the portfolio whenever they are ready.

Scenario 3: Training and Reference Materials

A consultant delivers training materials after a workshop. Attendees reference the materials:

  • During the first week (active learning)
  • One month later (applying concepts)
  • Six months later (refresher before a new project)

Permanent links turn a one-time delivery into an ongoing resource without any additional effort from the consultant.

Scenario 4: Family Video Archives

You compile a year’s worth of family videos into a highlights reel and share the link at a family reunion. Over the next several years:

  • Relatives who missed the reunion watch later
  • Family members re-watch during holidays
  • New partners and spouses discover the link

A permanent link keeps family memories accessible indefinitely.

Do: Use Encrypted Services

Permanent links on an unencrypted service mean the file sits readable on a server indefinitely. With E2E encryption, the file is encrypted at rest regardless of how long it exists. This is the most important factor in permanent link security.

Send links via encrypted messaging (Signal, iMessage) or direct email rather than posting in public channels, group chats with many members, or social media.

Set a quarterly reminder to review your shared files. Delete anything that has been received and is no longer needed. Permanent availability is a feature, not an obligation — you control the lifecycle.

Do: Keep Records

Maintain a simple log of what you shared, with whom, and when. This helps you identify which links to keep and which to clean up.

If you are sharing a file that should absolutely, positively be accessed once and then destroyed, use an expiring link or manually delete the file immediately after confirmed receipt.

Don’t: Assume Permanent Means Irrevocable

You can always delete the file. Permanent just means the link will not expire automatically.

The Bigger Picture: User Control Over File Lifecycle

The real advantage of permanent links is not permanence itself — it is user control. Instead of an arbitrary server-imposed deadline, you decide when a file is no longer needed. You delete it when you are ready, not when a timer runs out.

This aligns with how people actually use shared files. Access patterns are unpredictable. A client might download immediately or months later. A collaborator might need to re-access a reference file repeatedly. An expiring link assumes a predictable, time-bound access pattern that rarely matches reality.

Permanent links, backed by strong encryption and user-controlled deletion, offer the best of both worlds: convenience when you need access and security when you need control.

Frequently Asked Questions

Yes. Delete the file from your Stash account and the link is immediately disabled. Anyone who clicks it afterward will see that the file is no longer available.

The storage is the same — it is the same file. The difference is that expiring-link services automatically delete the file after the expiration period, freeing storage. With permanent links, you manage storage by deleting files you no longer need.

Not necessarily. With E2E encryption, the file is encrypted at rest regardless of how long it exists. The security of the file depends on who has the link (the key), not on how long the file sits on the server. A permanent encrypted link is more secure than an expiring unencrypted one.

Can I set a file to expire later if I change my mind?

On Stash, you can delete the file at any time, which is the equivalent of manually expiring the link. There is currently no option to set a future expiration date — the philosophy is that you control the lifecycle, not a timer.

This is a valid concern for any cloud service. If a service shuts down, files would need to be migrated. Stash stores files in secure cloud infrastructure designed for durability. As with any important file, keeping a local backup of critical content is good practice regardless of which sharing service you use.

This depends on your Stash plan. The free tier allows a limited number of files, while Pro unlocks unlimited file sharing.

Related Articles

Stash

Ready to share files?

Download Stash for iPhone, iPad, and Mac.

Download on the App Store