How can we help you?

Click "Sign Up" in the top right corner. You can register with your email address or continue with Google or GitHub. No credit card is required and the Free plan starts you with 5 GB of storage immediately.

The Free plan gives you 5 GB of storage, up to 3 workspaces you own, up to 5 team members per workspace, your pick of all 46 storage locations, public and private share links, password protected links, expiring links (up to 7 days, 5 active at a time), file requests, comments, LAN Transfer, the end to end encrypted Vault, and two factor authentication. Downloads are free but subject to daily fair-use allowances: 10 GB a day across share links and 5 GB a day per API or protocol credential. You can also earn 5 GB of extra storage for every friend who signs up and verifies their email, up to 25 GB. The full list is on our [fair use page](/fair-use/).

There are five plans: Free (5 GB), Starter at $3.99 per month (100 GB), Plus at $9.99 per month (500 GB), Pro at $19.99 per month (1 TB), and Business at $39.99 per month (2 TB). Need more than Business? Stack storage add-ons onto any paid plan: +100 GB for $2 a month, +1 TB for $15 a month, or +5 TB for $60 a month, in any combination. All paid plans include unmetered bandwidth, no egress fees, API access, webhooks, unlimited workspaces and members, and your pick of all 46 storage locations. Paying yearly gets you two months free. Four things come with an Enterprise agreement rather than a plan: SSO and SAML, a signed Data Processing Agreement, a named account manager, and private nodes.

Go to the Uploads page from your dashboard. Drag and drop your files into the upload area or click to browse your device. Your upload will begin immediately. Once it is complete, you can share it, organize it into folders, or leave comments on it.

dosya.dev runs in any modern browser, and the desktop app for macOS, Windows, and Linux adds two way folder sync. There is also a command line client, and your storage speaks S3, WebDAV, SFTP, and rclone if you would rather keep the tools you already use. Mobile apps for iOS and Android with automatic photo backup are coming soon; we will announce a date when they are on the stores.

No plan caps an individual file. The only limit is the storage left in your plan, so a single file can be as large as your remaining space. Workspace administrators can set their own per-file limit in workspace settings if they want one.

All file types are supported. You can upload videos, images, documents, archives, datasets, design files, or any other format. Common formats preview directly in the browser, including images, video, audio, PDFs, and text. Workspace administrators can also configure blocked file extensions if needed.

Large files are uploaded using multipart chunked transfers. If your connection drops or you close the browser, you can resume the upload by uploading the same file again. The system will pick up from where it left off using your existing upload session.

Your files are stored on Cloudflare R2, in the one location your workspace was created in, chosen from 46 across 6 continents including North America, Europe, Asia Pacific, South America, the Middle East, and Africa. That is where the bytes durably live. Uploads and downloads travel through the Cloudflare edge nearest whoever is transferring them, which is about speed and is separate from where the file is stored.

Yes, on every plan including Free. You pick the storage location when you create a workspace, from all 46 in the catalog, and every file written into that workspace is stored there. The choice is made once and locked afterwards, so the answer to "where does this data live?" cannot change under you. If you do not pick one, we suggest the location nearest you. Workspaces created in an EU member state are placed in Cloudflare R2's EU jurisdiction, which keeps the stored bytes in EU data centres.

You can create workspaces and folders to organize your files. Workspaces are top level containers that can have their own team members, roles, and settings. Inside each workspace you can create folders and nest them as needed.

Yes. File versioning is built in. Every plan keeps the newest 10 versions of a file by default, dropping the oldest beyond that; a workspace admin can raise, lower or remove that cap in workspace settings. On Free, a second rule also applies: versions older than 7 days are cleaned up, always keeping the newest. Paid plans have no time limit. Stored versions count toward your storage quota, and you can view or restore any kept version from the file details page.

Deleted files and folders move to the trash first, so a mistake is recoverable. From there you can restore them or permanently delete them with a second confirmation. Deleting a workspace removes everything inside it.

Yes. The duplicate finder in the web app groups exact copies of a file together so you can review them and remove the ones you do not need, reclaiming storage without guessing.

Yes. Connect the account, choose what to bring over, and the import runs on our servers, so nothing routes through your own connection and you can close the tab while it works. Google Drive imports include Shared Drives.

Yes. Paste any direct link and our servers fetch it straight into your workspace - resumable, up to 1 TB per file, and without using your own bandwidth. This is handy for large datasets, backups, or media that live on a slow origin.

LAN Transfer allows you to send files directly between two devices on the same network without uploading to the cloud. One device creates a 6 digit room code, and the other device enters it to connect. The transfer happens peer to peer using WebRTC, so it is fast and does not use any of your storage. Rooms expire automatically after 10 minutes. No account is required.

Nothing beyond your plan. Imports and uploads are free, and because no plan has egress fees, taking your data back out is free too. Making it cheap to leave is deliberate: you should stay because the product earns it, not because a download bill traps you.

Click the share button on any file to generate a download link. You can create a public link that anyone can access, or a private link that requires the recipient to verify their email before downloading. Copy the link and send it through any channel you prefer.

Yes. When creating a share link, you can set a password (minimum 8 characters). Recipients will need to enter the password before they can access the file. Workspace administrators can also enforce password protection on all share links across the workspace.

Yes. You can set a link to expire after 1 hour, 24 hours, 7 days, 30 days, or 90 days, or pick your own date and time, and on a paid plan you can leave it with no expiry at all. On Free the maximum is 7 days: ask for longer or for no expiry and the link is set to 7 days, with its real expiry shown to you when it is created. Once a link expires it stops working, but the file itself stays in your workspace - expiry closes the door, it does not delete anything. Workspace administrators can set a lower maximum expiry cap for all links in the workspace, which clamps anything longer.

Yes. You can revoke any share link at any time from the Shared page. Once revoked, the link will stop working immediately. Workspace administrators can also disable share link creation entirely for their workspace.

Yes. Enter one or more email addresses and an optional message, and everyone receives the same secure link. Leave "Only these people can open it" ticked and the link is private: each recipient confirms their address with a one-time code before the file appears, so a forwarded link is useless to anyone else. Untick it for an ordinary link anyone can open. Views and downloads are tracked either way.

Yes. Each share link tracks the number of views and downloads. The system records view and download events with timestamps and anonymized IP information so you can see how your files are being accessed.

Yes. Every plan includes comments on files, so feedback stays attached to the file itself instead of scattering across email threads.

File requests let you create a link where other people can upload files directly into your workspace folder. The uploader does not need a dosya.dev account. This is useful for collecting documents from clients, receiving submissions from students, or gathering files from collaborators.

Go to the File Requests page from your dashboard and click "Create Request." You can set a title, a message for the uploader, choose a destination folder, and configure options like allowed file types, maximum file size, maximum number of files, and an expiration date.

Yes. When creating a file request you can specify which file extensions are allowed, for example .pdf or .mp4. You can also set a maximum file size in megabytes and a limit on the total number of files that can be uploaded.

Yes. After creating a file request, you can invite recipients by email. Each recipient receives a unique tracking token so you can see who has uploaded and who has not. You can also resend invitations if needed.

Yes. You can set a password (minimum 8 characters) on any file request. Uploaders will need to enter the password before they can submit files.

The desktop app for macOS, Windows, and Linux keeps the folders you choose in two way sync with your workspace, shows sync activity as it happens, and lets you exclude folders you do not want synced. You can download it directly from the desktop page.

The iOS and Android apps are coming soon. They back up your photos and videos automatically, show live progress on your lock screen, and give you access to your files and shares on the go. We have not announced a release date; the web and desktop apps cover everything else in the meantime.

Yes. The command line client covers uploads, downloads, and sharing, and scripts cleanly against your workspaces from any terminal. Like our other clients, its source is public.

Yes. Besides the web app, your storage speaks WebDAV, so you can mount it as a network drive in Finder or Explorer, and S3, SFTP, and rclone cover the rest of the tools you may already use.

The Vault is end to end encrypted storage built into every account. Files you place in it are encrypted on your device, with a passphrase only you know, before they are uploaded. The server stores only public keys and ciphertext, so nobody at dosya.dev can open your Vault files, even if asked.

Your passphrase is hardened with Argon2id plus a verifiable OPRF, which stops the server from attacking it offline. File contents are encrypted with XChaCha20-Poly1305, and sharing with workspace members wraps keys using HPKE (X25519). The client code that does this is source available, so you can verify it instead of trusting it.

No. The Vault is included with every plan, including Free. Plans differ only in storage size.

Your passphrase never leaves your device and we do not keep a copy, so we cannot reset it. When you set up the Vault you receive a recovery key. Save it somewhere safe - it is the only way back in if you lose the passphrase.

Yes, with a different mechanism. HTTPS traffic requires TLS 1.2 or higher and negotiates TLS 1.3 with every current client; SFTP is secured by SSH rather than TLS. Everything stored on our servers is encrypted at rest with AES-256. The Vault goes further: it encrypts on your device with keys only you hold, before anything reaches us.

Go to your dashboard and click "Create Workspace." Give it a name, choose an icon color, and it is ready. You can then invite team members by email, create folders, configure workspace settings, and start uploading files.

The Free plan allows up to 3 workspaces. All paid plans (Starter and above) include unlimited workspaces. Each workspace can have its own members, roles, folders, and settings.

There are four built in roles: Owner (full control over everything), Admin (can manage files, members, and settings), Member (can upload, download, and share), and Viewer (read only access). You can also create custom roles with granular permissions covering over 50 specific actions.

Open your workspace settings and go to the Team page. Enter the email address of the person you want to invite and select a role. They will receive an email invitation with a link to join. You can also create public invite links for your workspace.

The Free plan supports up to 5 members per workspace. All paid plans include unlimited team members. Storage usage is tracked per user across all their workspaces.

Yes. Workspace administrators can set a maximum file size, define blocked file extensions, configure storage limits per member, control concurrent upload limits, enforce password protection on all share links, set a maximum share link expiry period, and enable or disable share links entirely.

All paid plans are billed monthly at a fixed price. There are no per gigabyte charges, no egress fees, and no surprise costs. You pay for your plan tier and that is it. Paying yearly gets you two months free. Payments are processed securely through Stripe.

No. All paid plans include unlimited bandwidth with no egress fees. You will never be charged for downloads, transfers out, or share link access. Your bill only reflects your plan subscription.

We accept all major credit and debit cards including Visa, Mastercard, and American Express. All payments are handled through Stripe.

Go to the Billing page from your dashboard. You can upgrade to a higher plan instantly, move to a smaller plan at any time, and cancel there as well. The Stripe customer portal handles your payment method and your invoices.

You can cancel from the Billing page. You keep paid features until the end of your billing period, and a 14 day grace window follows before Free limits apply. Nothing is deleted: files above the Free limit stay accessible and downloadable, you just cannot upload more until you are under the limit or on a paid plan again.

Yes. You can view your full invoice history and upcoming invoices from the Billing page. Invoices are fetched directly from Stripe.

All data in transit is encrypted using HTTPS (TLS). Files stored on our servers are encrypted at rest with AES-256. Passwords are hashed using PBKDF2 with SHA-256 and 100,000 iterations. For content you want encrypted before it ever reaches us, use the Vault.

Yes. The web app, desktop client, CLI, status page, and shared packages are public on GitHub under the Dosya Source Available License 1.0: you can read and audit every line, report issues, and contribute, but not redistribute the code or run it as a competing service. The official SDKs are MIT licensed. File storage should not be a black box.

No. There are no ads, no data sales, and no third party trackers. The business is storage subscriptions, so there is no advertising model pulling against the privacy claim. The privacy policy lists exactly what we collect and why.

Yes. You can enable two factor authentication from your account settings. Two methods are available: email verification codes and TOTP (authenticator app). When you enable TOTP, you will also receive recovery codes in case you lose access to your authenticator.

Audit logs track all significant actions in your workspace including file uploads, downloads, deletions, shares, email shares, link revocations, member invitations, member removals, role changes, and settings updates. Each entry includes the user, timestamp, IP address, and relevant metadata. History reaches back 7 days on Free and 400 days on paid plans; Enterprise can agree a different window. This is the history you can see, which is separate from the operational server logs we keep for security and debugging.

Yes. To protect against brute force attacks, accounts are temporarily locked after repeated failed login attempts. After 5 failed attempts the lock is 15 minutes, after 10 it is 1 hour, and after 20 or more it is 24 hours. API requests to authentication endpoints are also rate limited to 20 requests per minute.

dosya.dev is operated by DOSYA PTY LTD (ABN 27 700 842 235), an Australian company. The name comes from the Turkish word for file.

Report it through our bug bounty program, which covers scope, how to submit a report, and how disclosure is handled.

Yes. A REST API covers files, folders, sharing, and workspace management. API keys can be scoped to full access, read only, or upload only, given an expiry date, and revoked at any time, and outbound webhooks with signed deliveries can notify your systems when something changes. API access is on every plan, Free included: Free allows 3 keys and 3 webhook endpoints within the daily fair-use allowances, paid plans 20 keys and 16 webhook endpoints per workspace with no metering. An upload-scoped key is write-only - it cannot list or download, on any protocol.

Yes. dosya.dev exposes an S3 compatible API, so the AWS CLI, S3 SDKs, and backup tools that already speak S3 work against your workspace with a change of endpoint and credentials.

Yes. WebDAV support means you can mount your storage as a network drive in Finder, Windows Explorer, or any WebDAV client, and work with files as if they were local.

Yes to both. rclone treats dosya.dev as a remote for sync, copy, and mount workflows, and SFTP access covers scripted transfers from servers and legacy systems.

Yes. Official SDKs are published on GitHub under the MIT license, so you can embed uploads, sharing, and file management into your own applications without writing raw API calls.

Go to your Profile page from the dashboard and use the password change option. You will need to enter your current password and then set a new one. Passwords must be between 8 and 256 characters. A long, memorable passphrase is a good choice.

Go to your Profile page and update your email address. You will need to verify the new email address before the change takes effect.

On the login page, click "Forgot password" and enter your email address. You will receive a verification code to reset your password.

Go to your account security settings. You can enable either email based verification or TOTP (authenticator app). For TOTP, scan the QR code with an app like Google Authenticator or Authy. You will receive recovery codes that you should save in a safe place.

On the login or sign up page, click the Google or GitHub button. You will be redirected to authorize dosya.dev. Once authorized, your account will be created or linked automatically. If you have two factor authentication enabled, you will still need to complete the verification step after signing in.

You can delete your account and its data permanently. The account deletion page explains exactly what is removed and when, and walks you through the steps.