A link container bundles several download links under a single, short address. The target links are stored server-side encrypted and only delivered to the visitor after the access check is passed – ideal for sharing collections securely and neatly.
Learn more: Container, Encryption
Every container can be secured with a password, a captcha and geo/IP rules. The target links are stored encrypted and only delivered once a visitor passes the access protection you set. This keeps your sources hidden from crawlers, bots and prying eyes. Without any protection set, a container is open to anyone who knows its address.
Learn more: Captcha, Geo/IP rules, Encryption
The target links are stored in the database encrypted with AES-256-GCM on the server and are never served in plain text while the access protection has not been passed. This is encryption at rest, not true end-to-end encryption: the key lives on the server so that Zaulto can, for example, run the automatic online check on the links. What is encrypted are the target links themselves; a container's title and description as well as the file names and hoster names of its links are stored in plain text – so don't put confidential information there.
Learn more: Encryption, Online check
Four: a simple arithmetic challenge, an invisible proof-of-work (compute-based, no clicks), a custom question with a stored answer and Cloudflare Turnstile (lets Cloudflare check that a real browser is unlocking – usually without a click; only available when the operator has set it up). With the arithmetic challenge and the custom question the same proof-of-work runs invisibly as well – so every attempt costs compute time. Optionally the captcha only appears for visitors who open a container conspicuously often (adaptive captcha).
Learn more: Captcha, Proof-of-Work
Yes, the creator can switch on both per container. With Click'n'Load a single click adds all links to JDownloader at once. In addition, the link list can be downloaded as a .dlc file – in Zaulto's own format, in which the links are readable (not an encrypted JDownloader DLC). Both are only available after the access check has been passed.
Learn more: DLC container, Click'n'Load
Zaulto hands links to download managers such as JDownloader via Click'n'Load. Internet Download Manager (IDM) does not support Click'n'Load. However, after unlocking you can copy the links contained in the container manually and paste them into IDM, provided the creator allows copying.
Learn more: Click'n'Load, DLC container
DLC, CCF (CryptLoad Container File) and RSDF (RapidShare Download File) are link container formats that bundle several download links in one file and store them encrypted – for CCF and RSDF, however, with keys that have long been public. JDownloader can read all three formats. Zaulto hands links over via Click'n'Load; Zaulto's optional .dlc export is its own format with a readable link list.
Learn more: DLC container, Click'n'Load
Yes. You can store several mirror sources for a file; visitors see all mirrors of every file. You can also add whole mirror sets as a reserve: Zaulto checks the links regularly and automatically switches to the next set once every link of the current set is offline (failover).
Yes. Multi-part collections – such as RAR archives split into several parts – can be bundled as a link list in a single container. After unlocking, visitors get all parts at once, ideal for JDownloader.
Yes. Zaulto checks the status of the stored links automatically and marks whether a file is online or offline. If you have added reserve mirror sets, Zaulto switches to the next set once every link of the current set is offline.
Learn more: Online check
Create a container, add your download links and secure it with a password, captcha or geo/IP rules. You then share only the short container address (optionally as a QR code) – the actual links stay encrypted until a visitor passes the access protection.
Learn more: Container, Captcha, Geo/IP rules
Creating and sharing containers is free. You only need a free account to create a container.
Yes. You need a free account to create a container; it can be used once you have confirmed your email address. With an account you can also manage your containers later, view statistics and organize them in folders.
You can set a password for a container. Visitors must enter it before the links are released. The password is not stored in plain text, only as a secure hash (argon2id) for verification. It acts as an access key – the actual link encryption runs independently on the server.
Learn more: Encryption
With geo rules you restrict a container to certain countries or block individual countries; the country is usually determined on a visitor's very first request. With IP block lists you block single addresses or whole ranges – for a container, a folder or your entire account. Requests that don't match are denied access to the links.
Learn more: Geo/IP rules
In stealth mode Zaulto answers visitors who fail a protection rule (e.g. geo rule, IP block, limit or expiry) with "not found" instead of "blocked" – to them it looks as if the container didn't exist at all. Stealth mode is switched on by default for new containers.
Learn more: Stealth mode
AutoProtect is an add-on to URL masking: when a visitor clicks a masked link, Zaulto first shows an intermediate page with a short wait and an invisible compute check (proof-of-work) and only then forwards to the hoster. This keeps the download links from being harvested by a simple script. You switch it on per container and set the wait time there.
Learn more: AutoProtect, Stealth mode
Yes. You can set an expiry date and limit the number of unlocks – either so that the container hands out no more links afterwards, or so that it deletes itself. Once expired or the limit is reached, the container is no longer accessible.
Learn more: Expiry & limits
Yes. With an account you can group several containers into folders and share a folder via a single link. This keeps larger collections tidy.
The dashboard shows an access overview of the last 7 days: number of views, rough geographic distribution and the timeline. Zaulto builds no personal user profiles and sets no advertising trackers or third-party cookies. Technical access data is processed solely for statistics, protection rules (geo/IP, rate limit) and abuse prevention.
Containers are always tied to an account. In your dashboard you can delete any of your own containers any time with a single click – it is then immediately no longer accessible and disappears from the public directory. The associated links are no longer reachable afterwards, and its address is never handed out again.
Every captcha challenge is single-use and each attempt additionally costs an invisible compute check; wrong answers are limited per visitor. With Cloudflare Turnstile the server additionally verifies every token with Cloudflare – bound to the container and valid only once. If the Cloudflare module does not load in the browser (ad blocker, Brave Shields), the visitor can solve a harder compute check instead – eight times the cost of the normal one. The captcha is checked before the password, and if a password container is being guessed at from many addresses, it asks every visitor for a captcha. After unlocking, the visitor receives a short-lived access token – Click'n'Load and the DLC export only work with it as well.
Learn more: Captcha, Proof-of-Work
Yes. Creating, sharing, unlocking and the dashboard are fully optimized for mobile devices. Shared links can also be displayed as a QR code.
Containers with an expiry date, an auto-delete date or a reached self-destruct limit are deleted automatically and are no longer accessible afterwards. Zaulto checks this on every request and additionally every five minutes in the background – you don't have to do anything manually.
Learn more: Expiry & limits
Each container can hold up to 200 links, plus optionally up to 20 mirror groups (mirror sets) with up to 200 links each as well. Title and description are length-limited. The number of containers per account is not rigidly capped; fair use applies. Per container you can also set your own rate limits, expiry dates and access caps.
Zaulto runs as a modern single-page application. JavaScript is needed to create containers, handle the access protection (captcha or proof-of-work), release links after a passed check, and provide features such as Click'n'Load and the dashboard. Without JavaScript enabled, containers can therefore neither be created nor unlocked.
Zaulto is a neutral technical service and does not host any files or target content itself – Zaulto is not a file host, it only protects and bundles links. The creator of a container is solely responsible for the linked content. Unlawful content can be reported and affected containers are blocked. Details are in the disclaimer.
You can report specific legal infringements via the contact form. Once we become aware, we remove affected containers without undue delay. Please provide the container address and a short justification.
From the first concept to the finished platform – how Zaulto evolves step by step.