How to share download links securely – the complete guide

Open link lists are a risk: bots harvest them, they get reported or blocked, and they quickly become unmanageable. This guide shows how to pass on download links encrypted, access-protected and neatly organised – using a link container instead of an open list. Zaulto bundles your links in a protected container, with no installation and no tracking.

Why open link lists are a problem

Posting several download links directly into a forum, chat or web page makes them instantly visible to everyone – including automated bots. These scan the web specifically for open links, harvest them and get them reported or blocked. Long lists are also messy and break the moment a single source goes offline.

The answer is a link container: instead of posting every link in the open, you bundle them all, encrypted, under a single short address. They only become visible once a visitor passes the access check.

What is a link container? – the basics in detail

Password protection: only the key holder sees the links

The simplest effective protection is a password per container. Visitors must enter it before the links become visible. The password is not stored in plain text but only as a hash, and the links are only delivered once it is entered correctly. So you can share the short container address openly – and pass the password to recipients separately, through a different channel.

How does password protection work? – FAQ

Captcha: slow down bots, let people through

To stop automated scripts from simply harvesting your links, every container can be secured with a captcha. Zaulto offers three variants: a simple arithmetic challenge, an invisible proof-of-work (compute-based, no clicks) and a custom question with a stored answer. The arithmetic challenge and the custom question include the same invisible proof-of-work – it makes mass automation costly without locking scripts out entirely; the pure proof-of-work variant needs no click puzzles.

Captcha – definition in the glossary

Geo and IP rules: narrow access deliberately

With geo and IP rules you control where a container may be accessed from. You can restrict access to specific countries or block individual IP ranges. Requests that don't match get no access to the links at all – an effective extra hurdle against unwanted access.

Geo & IP rules – definition in the glossary

Stealth mode & AutoProtect: give less away

In stealth mode visitors who fail a protection rule – such as geo, IP block, limit or expiry – see “not found” (404) instead of “blocked” (403): to them the container looks as if it doesn't exist. It is on by default for new containers. With optional URL masking the real hoster addresses are not in the page source; Zaulto only redirects to the hoster on click. AutoProtect adds an intermediate page with a short wait and an invisible proof-of-work to the masking, per container, so links can't be read out by a simple script.

Stealth mode & AutoProtect – definitions in the glossary

Time and quantity limits: links expire under control

For each container you can set an expiry date and access limit and limit the number of unlocks. At the expiry date the container is deleted; once the download limit is reached it hands out no more links – or it deletes itself via self-destruct after the set number of unlocks. That way shared links don't circulate forever, but exactly as long as you want.

Expiry date & access limit – definition in the glossary

DLC & Click'n'Load: straight into the download manager

For large, multi-part collections you can switch on Click'n'Load per container – a single click adds all links to JDownloader at once. You can also offer a .dlc file; it is Zaulto's own format with the links in readable form (not an encrypted DLC file for JDownloader) and is unavailable with URL masking. Both are only available after the visitor has passed the access check.

What is a DLC container? – explained in detail

Secure sharing means leaving nothing in the open. With a protected container you only pass on a short address – encrypted, access-protected and revocable at any time. No installation, data-minimal and without tracking, on your smartphone too.

More on this topic

  • What is a DLC container?
  • Click'n'Load explained simply
  • DLC vs. CCF vs. RSDF – formats compared
  • Supported hosters – which file hosts Zaulto supports
  • Use cases – what you can use Zaulto for
  • Zaulto & JDownloader – complement, not alternative
  • Blog – tips & updates
  • Glossary – terms around link containers