Security
Your files stay private until you share them.
FileRush is a private cloud for large files. The model is simple: files stay in your workspace until you create a share, and a share can be taken back. We describe what the product actually does.
Private by default
Every file starts as an owner-only object. A storage path, file id, or vendor file code is not enough for someone else to download it. Existence is not permission.
Encrypted transport
Browser uploads, remote imports, and authorized downloads use TLS. We do not claim end-to-end encryption, zero-knowledge storage, or that FileRush cannot access files on disk.
Access controls
Downloads, previews, renames, moves, deletes, and shares are authorized against the workspace that owns the file. There is no anonymous file code that bypasses that check.
Share revocation
A share is a separate record with its own token. You can expire it, limit downloads, password it, or revoke it immediately. Revocation does not wait for a cache to expire on a public CDN URL.
Password sharing
Share passwords are stored with modern password hashing, never in plaintext next to the file.
No public index
There is no catalogue, no search of other people’s files, no uploader profile, and no trending list. FileRush is not a destination for discovering files.
Abuse reporting
We take reports for malware, phishing, copyright, and illegal content. A share, file, or account can be suspended while a case is reviewed.
Account and session protection
Public sign-in belongs to FileRush, not the storage engine underneath. Sessions use HttpOnly cookies. Passwords require at least 12 characters.