BIT
BASIRAITFILE MANAGEMENT APP

Sign in

Enter your admin email address. If it is an owner address on this server, we'll email you a one-time code.

Check your email

Enter the code we just sent.

Sent to
Expires in 0:60

Two-step verification

Open your authenticator app and enter the 6-digit code for BasiraIT.

Lost your phone? Enter one of your recovery codes instead.

Only admin addresses configured on this server can sign in.
BIT
BASIRAITFILE MANAGEMENT APP
Menu
Overview Files0 Upload Access Keys0 File Browser
Account
API Docs Security

Storage online

Bucket static-assets. Files are served from .

Upload a file
⌘ K
A
Admin

Welcome back

Your files, keys and storage at a glance.

New access key Upload file

Storage used

0
Compressed size on disk

Files stored

0
0 in the last 7 days

Access keys

0
0 company · 0 full access

Public files

0
Readable without a key

Upload activity

Uploads per day, last 7 days

Next step

You are all set

Keys are issued and files are being served.

View files

Storage by owner

Recent uploads

View all

File types

All stored files
0files

Signed in for

00HOURS
:
00MIN
:
00SEC

From key to first file

1
Create an access key

In Access Keys. Copy it right away: it is shown only once.

2
Upload a file

Send it with the X-API-Key header, or use Upload here.

3
Share a public link

Upload with category=public to get a /f/<id> link anyone can open.

4
Give each company its own key

Your backend calls POST /api/service/keys; each key only sees its own files.


                
              

              
Replace sk_... with one of your access keys.

            


            

              
Account

              

                
Email
—

                
Sign-in method
Email code

                
Stays signed in until
—

                
Admins on this server
—

              

            

          


          
          

            
Files
Every file in the bucket, newest first.

              
Upload file

          

          

            

              
              
              
              
            

            

              

                
FileOwnerSizeAccessUploaded

                
              

            

            
No files match.

            

            

          


          
          

            
File Browser
Paste an access key to see exactly the files that key can reach, as its app would.

          

          

            

              
              
              
            

            

              
            

            
The key stays in this tab only and is sent without your admin session, so the list is limited to what the key itself may see.

            

          

          

            

              
Files

              
                
                
              
            

            

              

                
FileOwnerSizeAccessUploaded

                
              

            

            
This key can't see any files yet.

            

            

          


          
          

            
Upload
Up to 5 MB per file. Text-like files are compressed losslessly.

          

          

            
            

              
              
              
            

            

              
              
              
            

            

            

              
Uploaded 

              

            

          


          
          

            
Access Keys
Keys let apps call the API from anywhere with the X-API-Key header.

          

          

            
Create a key
Choose what it can do, then copy it once

            

              
              
            

            

              
              
              
              
              
              
            

            

              Can
              
              
              
            

            

              
              
              
            

            

            

              
Copy this key now. It is shown only once and can't be recovered.

              

              

                Next: put it on your server
                

                Check that it works
                

                The check shows the key's type, permissions and folders. Full guide: API Docs → Service keys.
              

            

          

          

            
How keys work
Read the guide

            

              
1
Create
Pick a type and what it can do. Least access is safest: a server that only shows files needs only Read.

              
2
Store it on the server
In an environment variable such as BITSTATIC_KEY. Never in browser or mobile code, never in git.

              
3
Call the API
Send X-API-Key on every request. Same endpoints for every key type.

              
4
Rotate or revoke
Rotate gives a new secret; the old one works 24 h more. Revoke stops it at once.

            

          

          

            
All keys

            

              

                
KeyType & accessLimitsUsageLast used

                
              

            

            
No keys yet. Create the first one above.

          


          
          

            
API Docs
How to use every endpoint from your own apps and backends. Examples use .

          

          

            

            

          


          
          

            
Security
How this panel and the API are protected.

          

          

            

              
Admin sign-in

              

                
Method
You type your admin email, we send a one-time code (60 seconds, single use), then the authenticator code if two-step is on

                
Who can sign in
Only the addresses in ADMIN_EMAILS

                
Limits
5 wrong tries burn a code · new code after 60 s · 5 codes per hour · IP lockout after 5 failures

                
Session
Stays signed in (30 days, renewed while you use it). HTTP-only cookie; ends on sign out or when the address is removed from ADMIN_EMAILS

              

            

            

              
Two-step verification
Authenticator app (Google Authenticator, Authy, 1Password…)

                Off

              

                
After the emailed code, sign-in also asks for a 6-digit code from your phone. Recommended.

                
              

              

                
    
                  
  1. Open your authenticator app and scan this QR code.
    2. 
                  
  2. Can't scan? Enter this key by hand: 
    3. 
                  
  3. Type the 6-digit code the app shows.
    4. 
                

                QR code for the authenticator app
                

                  
                  
                  
                

                

              

              

                
Two-step verification is on. Save these recovery codes now. Each works once if you lose your phone, and they won't be shown again.

                

                
                
              

              

                
Sign-in asks for your authenticator code. 0 recovery codes left.

                

                  
                  
                

                

              

            

            

              
Access keys & files

              

                
Keys
Stored only as SHA-256 hashes; shown once at creation

                
Company isolation
Scoped keys only see files under their own owner prefix

                
Serving
HTML, SVG, JS and XML are always downloads, never rendered

                
Transport
HTTPS only, rate limited at the proxy