The latest articles on DEV Community by Amit Karn (@amit_karn_8dcbb76387ee841). https://dev.to/amit_karn_8dcbb76387ee841 https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4134462%2Fdbcf692b-34bf-4bcf-a4b4-16975464fc1a.jpg https://dev.to/amit_karn_8dcbb76387ee841 en Amit Karn Sun, 20 Sep 2026 18:56:31 +0000 https://dev.to/amit_karn_8dcbb76387ee841/encrypted-file-storage-share-links-you-actually-set-the-rules-on-or-go-p2p-32ae https://dev.to/amit_karn_8dcbb76387ee841/encrypted-file-storage-share-links-you-actually-set-the-rules-on-or-go-p2p-32ae <p>Turn on encryption and your upload is scrambled client-side with AES-256-GCM before it leaves your browser.</p> <p><a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F17leu33veoawgopjrrta.png" class="article-body-image-wrapper"><img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F17leu33veoawgopjrrta.png" alt=" " width="800" height="520"></a></p> <p>The key is generated server-side once, emailed to you, and never stored after that — lose the email and the files are gone too. There's no recovery flow, because building one would mean keeping a copy of the thing we're claiming not to keep.</p> <h2> Share links with real rules </h2> <p>Files you store sit behind share links with their own password, download cap, and expiry, set per link, each independently revocable. Two links to the same file can carry completely different rules</p> <p><a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fo0l3366jqhqwbjw38rax.png" class="article-body-image-wrapper"><img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fo0l3366jqhqwbjw38rax.png" alt=" " width="800" height="520"></a></p> <h2> Notes, live and shared </h2> <p>Real-time cursors and search across your notes by default.</p> <p><a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fjnw892vvzcsqmsaf48gl.png" class="article-body-image-wrapper"><img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fjnw892vvzcsqmsaf48gl.png" alt=" " width="800" height="520"></a></p> <p>Lock a specific note and both of those drop out, since neither works<br> without the server reading what's inside. That's a per-note choice, not<br> account-wide.</p> <h2> Or skip the server entirely </h2> <p>A six-digit code sets up a WebRTC data channel directly between two<br> browsers over DTLS. No upload, no size cap, nothing stored.</p> <p><a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fk3otko1z1aqdymuhdve1.png" class="article-body-image-wrapper"><img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fk3otko1z1aqdymuhdve1.png" alt=" " width="800" height="502"></a></p> <h2> Stack </h2> <p>Next.js, Laravel API, Postgres, Reverb for the live-cursor sync, Backblaze<br> B2 for storage, on Kubernetes on a small VPS.</p> <p><strong><a href="https://sharenod.com" rel="noopener noreferrer">sharenod.com</a></strong> — free to use.</p> webdev showdev security privacy