Encrypted at rest
Every file is encrypted with AES-256-GCM. Only ciphertext sits on the server disk; the key lives elsewhere.
Up to 10 GB per file · No sign-up to download · AES-256-GCM
Upload a file —
Upload a file —
get a link
Upload big files, share them through a permanent link and convert formats right in the browser. Everything else — encryption, API and file management — is already built in.
Free plan, forever
Nothing to install
No card required
Supported
PDF
ZIP
RAR
MP4
MKV
MP3
FLAC
PNG
JPG
WEBP
DOCX
ISO
APK
01
Three steps from file to link
Nothing to install — it all runs in the browser.
1
Upload
Drag a file into the browser or POST it through the API. Right after upload it is encrypted and kept only in encrypted form.
2
Get the link
Every file gets a permanent public address. Whoever downloads it does not need an account.
3
Track and delete
Size, date and download count are in your dashboard. One button removes the file and its contents.
02
What BoS Files does
Ordinary things, done carefully.
Direct links
A permanent link for every file. Send it to anyone — downloading needs no account. Also works in websites, apps and download managers.
Resumable downloads
Delivery supports HTTP Range, so an interrupted download picks up exactly where it stopped.
Format converter
Images, video, audio and documents change format on the server — no desktop software needed.
REST API
Upload, list, inspect and delete files with plain HTTP requests. Keys are issued in settings.
Two-factor login
TOTP codes from an authenticator app, plus recovery codes in case you lose the phone.
03
The converter is built in
Change a file format and download the result right away. No separate program required.
Images
PNG
WEBP
Video
MOV
MP4
Audio
WAV
MP3
Documents
DOCX
PDF
04
What protects your account
Not certification badges — the mechanisms that are actually switched on.
AES-256-GCM
Authenticated encryption of file contents on disk, with integrity checking.
bcrypt
Passwords are stored only as salted hashes — the original cannot be recovered.
TOTP 2FA
A second factor from your authenticator app plus single-use recovery codes.
CSRF and cookies
Tokens on every form; session cookies flagged HttpOnly, Secure and SameSite.
05
Automate it with the API
Upload from scripts, CI or your own app. The API is available on Pro and above.
The key is issued in account settings and sent in the Authorization header.
Request
curl -X POST https://games22.fun/api/v1/files/upload \ -H "Authorization: Bearer $BOSX_KEY" \ -F "file=@build.zip" # Response { "success": true, "file_id": 1042, "public_link": "https://games22.fun/download/a1b2c3d4", "size": 260046848 }
06
Pricing
Start free. Move up when you hit a limit.
Start on the free plan
2 GB of storage, 10 uploads a day and the file converter. Signing up takes under a minute — the free plan is available right away.