Skip to main content
tiCrypt 2.18.1

Inboxes

ResearcherRequires: User role
Permission requirements
  • Vault Files and Directories
    • View their directories and their groups' directories
    • Create directories (also needs “Add items to directories”)
  • Inboxes
    • View their inboxes
    • Create inboxes, so people without an account can send them files
    • Delete their inboxes
info

Inboxes are one of several data ingress methods in tiCrypt. For the full picture, see Data Ingress and Egress.

Access Inboxes​

  1. Go to the Vault icon in the top left panel.
  2. Click the Inboxes section on the left panel.
  3. View a list of all the inboxes you have created.

Create an Inbox​

Method One​

  1. Go to the Vault icon in the top left panel.
  2. Click the Inboxes section on the left panel.
  3. Click the Create inbox button in the top panel.
  4. In the prompt, enter the inbox name and select the parent directory.
  5. Next, set the inbox type to URL.
  6. Enter the inbox expiration date and capacity.
  7. Next, enter the uploader's name and a message for them.
  8. Click Create Inbox.
  9. Select the new inbox, click the Open full menu button, and select Manage inbox.
  10. Click the uploader's name to view their message preview.
  11. Click Copy to copy the inbox URL.
  12. Share the generated link with the uploader.

Method Two​

  1. Go to the Vault icon in the top left panel.
  2. Click the My Files section on the left panel.
  3. Select the directory you want to turn into an inbox.
  4. Click the Open full menu button in the top center panel.
  5. Select Manage inbox.
  6. In the prompt, click the Create new access point button in the top right corner.
  7. Set the inbox type to URL.
  8. Enter the inbox expiration date and capacity.
  9. Next, enter the uploader's name and a message for them.
  10. Click Create Inbox.
  11. Once the access point is created, click the uploader's name to view their message preview.
  12. Click Copy to copy the inbox URL.
  13. Share the generated link with the uploader.
note
  • The Uploader is the external individual who uploads data into tiCrypt via inboxes.
  • You can create a new directory and convert it into a new inbox.
info
  • You may need to enter your password before creating an inbox. This happens when your private key timer has expired and the key is no longer held in memory. Any action that requires your private key will prompt for your password to decrypt it again.
tip

Set an expiration date for all inboxes.

The inbox form​

Create inbox appears on the Inboxes section when you have the Create inboxes, so people without an account can send them files permission. The form is titled "Create new inbox". From Manage inbox it is titled "Create new access point for folder" and skips the name and parent folder. Manage inbox is offered for one folder outside group folders whose project is active in your session, and needs the View their inboxes permission.

The parent folder picker lists only your own folders in My Files. tiCrypt creates a folder with the inbox name inside the parent you choose. If the parent already has a folder with that name, that folder becomes the inbox instead.

The following table describes the fields of the inbox form.

FieldRules and messages
Name for your new inbox directoryRequired ("You must enter a name for the inbox directory"), at most 80 characters, without the special characters that folder names do not allow (see Create). The hint reads "A new directory with this name will be created inside the selected parent".
Type of inboxURL (the default): "Files deposited through a web interface." and "A link will be sent." SFTP: "Files deposited through SFTP." and "SFTP credentials are sent through a link."
Enable password protection for this access pointURL inboxes only. Shows Password and Repeat Password, and the notice "The password set here will not be displayed after inbox creation. Make sure to write it down somewhere." See Create a Password-Enabled Inbox.
SFTP ServerSFTP inboxes only. The servers your administrator registered. Required ("You must select an SFTP server").
SFTP UsernameSFTP inboxes only. Required ("You must enter a username"), at most 20 characters, English letters only ("May only contain English letters").
ExpirationRequired ("You must enter an expiration date"). Any date from today up to the longest duration your administrator allows, 365 days by default. Earlier or later dates show "Must be after date" or "Must be before date". The access point stops working at the end of the chosen day.
Capacity (Bytes)Required ("You must enter a limit for how many bytes may be uploaded"). A whole number of GB or TB: the total size the sender may upload through this access point.
Name of uploader (optional)At most 20 characters. When left empty, the inbox name is used. The sender sees it on the upload page, and it names the folders their deliveries arrive in.
Message (Optional)At most 250 characters, without <, >, { or }. The sender sees it on the upload page.
Confirmations, Errors & Solutions
Inbox Creation Confirmation

Inbox created successfully.

Copied URL Successfully

URL copied.

Did not Enter Inbox Name

You must enter a name for the inbox directory.

Enter Inbox Name

In the inbox creation prompt, enter the inbox name in the Name of inbox field.

Did not Enter Expiration Date

You must enter an expiration date.

Enter Expiration Date

In the inbox creation prompt, enter the expiration date in the Specifications section.

Did not Enter Upload Limit

You must enter a limit for how many bytes may be uploaded.

Enter Upload Limit

In the inbox creation prompt, enter the upload limit in the Specifications section, then select either GB or TB as the unit.

Create Inbox Button Inactive

Create Inbox button still inactive, after you entered the inbox name, expiration date and upload limit.

Select Parent Directory

In the inbox creation prompt, select the parent directory where the inbox will be located in the Select parent directory for inbox section.

SFTP Part of the Inbox Not Created

Failed to create SFTP portal, inbox still useable via tiMover or the web

Use the Web Link or Try Again

The inbox exists, but the SFTP server did not accept the new account. Senders can still use the access point's web link, shown in Manage inbox as Alternative URL share link. To offer SFTP, delete the access point and create it again, or contact your administrator.

Upload Files and Directories into an Inbox​

bulk-action

This section summarizes what the sender does. For the full description of the page the sender sees, including every message it can show, see Inbox Upload Page.

  1. An inbox URL has been shared with you.
  2. Paste the link into the browser.
  3. If the page shows This mailbox is password protected., enter the password you were given and click Enter inbox.
  4. Click Select Files or Select Directories, or drag files and directories onto the window.
  5. Review the staged list. To drop an item before sending, click the Remove file button next to it.
  6. Click Upload, which shows the number of staged files (for example Upload 3 files).
  7. When the page shows All files uploaded, close the tab.
note
  • Select more files or directories at any time before uploading to add them to the list.
  • The uploader can view the name and email of the tiCrypt user who opened the access point for them, the inbox expiration date, the message for them, and the remaining space for upload.
  • Uploads cannot be undone by the sender: the page has no way to read back or delete files once they are sent.
info

The URL must be shared with the external individual through a separate channel, such as email.

Confirmations, Errors & Solutions
Upload Confirmation

Uploaded.

All Files Uploaded

All files uploaded

Red Background in File or Directory List

The row of a file or directory that failed turns red and shows a icon.

Review Upload

Hover over the icon in the row to read the error for that file or directory.

Not Uploaded Warning

Not uploaded

Send Staged Files

Not uploaded marks a staged file that has not been sent yet. Click Upload N files (N is the number of staged files) to send the staged files.

Entered Wrong Password as Uploader

Incorrect password. Please try again.

Re-enter the Correct Password

Re-enter the correct password in the password-protected inbox link. If access is still denied, contact the inbox owner for assistance.

Upload Exceeds Allowed Size Limit

Not enough space for all uploads.

Contact the Inbox Creator

This is a warning: it does not stop the sender from clicking Upload, but files beyond the remaining space are refused. Remove some files, or contact the inbox creator to request a new access point with sufficient space.

Request Entity Too Large

Your browser may display a 413 Request Entity Too Large error.

Upload Smaller Size Files/Directories Or Ask Inbox Creator

The total upload exceeded the inbox size limit, resulting in a partial upload. Only some files and directories were uploaded. Ask the inbox creator for a larger inbox.

Create an SFTP Inbox​

Method One​

  1. Go to the Vault icon in the top left panel.
  2. Click the Inboxes section on the left panel.
  3. Click the Create inbox button in the top panel.
  4. In the prompt, enter the inbox name and select the parent directory.
  5. Next, set the inbox type to SFTP.
  6. Select the SFTP Server and enter an SFTP Username of up to 20 English letters. The sender logs in with this username.
  7. Enter the inbox expiration date and capacity.
  8. Next, enter the uploader's name and a message for them.
  9. Click Create Inbox.
  10. Select the new inbox, click the Open full menu button, and select Manage inbox.
  11. Click the uploader's name to view their message preview.
  12. Click Copy to copy the SFTP link to share.
  13. Share the generated link with the uploader.

Method Two​

  1. Go to the Vault icon in the top left panel.
  2. Click the My Files section on the left panel.
  3. Select the directory you want to turn into an inbox.
  4. Click the Open full menu button in the top center panel.
  5. Select Manage inbox.
  6. In the prompt, click the Create new access point button in the top right corner.
  7. Set the inbox type to SFTP.
  8. Select the SFTP Server and enter an SFTP Username of up to 20 English letters. The sender logs in with this username.
  9. Enter the inbox expiration date and capacity.
  10. Next, enter the uploader's name and a message for them.
  11. Click Create Inbox.
  12. Once the access point is created, click the uploader's name to view their message preview.
  13. Click Copy to copy the SFTP link to share.
  14. Share the generated link with the uploader.
info

SFTP inboxes are created by users, not administrators: anyone whose profile includes the Create inboxes, so people without an account can send them files permission can create one once an administrator has registered the SFTP inbox server. When the sender opens the link, they see the SFTP host, port, this username, and a generated password that stays valid for 30 minutes. Opening the link again after that issues a new password.

note

An SFTP inbox only receives files. Sending files out of tiCrypt over SFTP is a separate feature: it uses an SFTP bidirectional connection, and a Super-admin must first allowlist the destination server for you or your team. See SFTP Connections.

Confirmations, Errors & Solutions
SFTP Inbox Creation Confirmation

Inbox created successfully.

Copied URL Successfully

URL copied.

Did not Enter Inbox Name

You must enter a name for the inbox directory.

Enter Inbox Name

In the inbox creation prompt, enter the inbox name in the Name of inbox field.

Did not Enter SFTP Name

You must enter a username.

Enter Inbox SFTP Username

In the inbox creation prompt, enter the SFTP Username in the Type of inbox section.

Did not Enter Expiration Date

You must enter an expiration date.

Enter Expiration Date

In the inbox creation prompt, enter the expiration date in the Specifications section.

Did not Enter Upload Limit

You must enter a limit for how many bytes may be uploaded.

Enter Upload Limit

In the inbox creation prompt, enter the upload limit in the Specifications section, then select either GB or TB as the unit.

Create Inbox Button Inactive

Create Inbox button still inactive, after you entered the inbox name, expiration date and upload limit.

Select Parent Directory

In the inbox creation prompt, select the parent directory where the inbox will be located in the Select parent directory for inbox section.

Create a Password-Enabled Inbox​

Method One​

  1. Go to the Vault icon in the top left panel.
  2. Click the Inboxes section on the left panel.
  3. Click the Create inbox button in the top panel.
  4. In the prompt, enter the inbox name and select the parent directory.
  5. Next, set the inbox type to URL.
  6. Tick Enable password protection for this access point.
  7. Enter the inbox password twice, in Password and Repeat Password.
  8. Next, enter the inbox expiration date and capacity.
  9. Then, enter the uploader's name and a message for them.
  10. Click Create Inbox.
  11. Select the new inbox, click the Open full menu button, and select Manage inbox.
  12. Click the uploader's name to view their message preview.
  13. Click Copy to copy the inbox URL.
  14. Share the generated link with the uploader.

Method Two​

  1. Go to the Vault icon in the top left panel.
  2. Click the My Files section on the left panel.
  3. Select the directory you want to turn into an inbox.
  4. Click the Open full menu button in the top center panel.
  5. Select Manage inbox.
  6. In the prompt, click the Create new access point button in the top right corner.
  7. Set the inbox type to URL.
  8. Tick Enable password protection for this access point.
  9. Enter the inbox password twice, in Password and Repeat Password.
  10. Next, enter the inbox expiration date and capacity.
  11. Then, enter the uploader's name and a message for them.
  12. Click Create Inbox.
  13. Once the access point is created, click the uploader's name to view their message preview.
  14. Click Copy to copy the inbox URL.
  15. Share the generated link with the uploader.
info
  • The uploader must provide the inbox password to upload files or directories into your inbox.
  • When creating a password-based access point, the password cannot be changed or viewed once created.
  • The password must reach a minimum strength. A weak one shows a suggestion such as "Add another word or two. Uncommon words are better."
Keep inbox passwords to 20 characters or fewer

The upload page lets the sender type at most 20 characters in its Password field, so a longer password cannot be entered there and the sender cannot open the inbox.

Confirmations, Errors & Solutions
Inbox Creation Confirmation

Inbox created successfully.

Access Point Password Protection

This access point is password-protected. The password cannot be viewed after creating an access point.

Copied URL Successfully

URL copied.

Did not Enter Proper Password

Add another word or two. Uncommon words are better.

Enter a Longer Password

In the inbox creation prompt, enter a longer password in the Type of inbox section.

Did not Enter The Same Password

Passwords do not match.

Re-Enter Both Password and Confirmation

In the inbox creation prompt, re-enter the password and the password confirmation in the Type of inbox section.

Create Inbox Button Inactive

Create Inbox button still inactive, after you entered the inbox name, password, password confirmation, expiration date and upload limit.

Select Parent Directory

In the inbox creation prompt, select the parent directory where the inbox will be located in the Select parent directory for inbox section.

Change an Inbox Access Point​

  1. Go to the Vault icon in the top left panel.
  2. Click the My Files section on the left panel.
  3. Select the inbox you want to manage.
  4. Click the Open full menu button in the top center panel.
  5. Select Manage inbox.
  6. In the prompt, click the delete button on the right side of the access point you want to replace.
  7. Click the Create new access point button in the top right corner.
  8. Select the inbox type, then re-enter a new inbox expiration date and capacity.
  9. Re-enter the uploader's name and a message for them.
  10. Click Create Inbox.
Confirmations, Errors & Solutions
Access Point Creation

Access point created successfully.

Copied URL Successfully

URL copied.

Message For Uploader Used Restricted Symbols

May not contain

'<', '>', '{', or '}'
Re-enter Message for Uploader Without Special Symbols

In the inbox creation prompt, re-enter the message for the uploader in the Information for recipient (optional) section, avoiding the special characters listed above.

Manage Multiple Inbox Access Points​

bulk-action

  1. Once the first access point has been created, view the pop-up.
  2. Click the Create new access point button in the top right corner.
  3. For the new access point, select the inbox type URL or SFTP.
  4. Enter the inbox expiration date and capacity.
  5. Enter the uploader's name and a message for them.
  6. Click Create Inbox.
  7. Repeat this process to create additional access points as needed.
  8. Click Copy to copy the details of the appropriate access point.
  9. Share the details with the appropriate uploader.
  10. Once done, click Close.
tip

Hover over the Link to share text to preview your full inbox access point link.

The Manage inbox dialog​

The dialog is titled "Manage access points for folder". Each access point is a row with a link icon for a URL access point or a server icon for an SFTP one. The first line shows "user@host" for an SFTP access point, otherwise the uploader name, otherwise the expiration date. The second line shows "Expires date" or, on a red row, "Expired on date", followed by the free space, for example "• 10 GB free".

  • Details: click a row (tooltip Check details) to show its message and, for a password-protected access point, "This access point is password-protected. The password cannot be viewed after creating an access point."
  • Alternative URL share link: an SFTP access point also has a web link, shown in its details with a Copy button. Senders who cannot use SFTP can upload through it.
  • Copy: the button next to Link to share or SFTP link to share copies the link and shows "URL copied".
  • Empty state: a folder without access points shows "No access points created yet." and 'Click on the "Create new access point" button to start creating access points for this directory.'

Access points cannot be edited. To change one, delete it and create a new one, as described in Change an Inbox Access Point.

Where deliveries arrive​

Each time a sender clicks Upload on the upload page, the files arrive in a new folder inside the inbox, named after the uploader name and the time on the sender's computer, for example fred-Fri-Oct-16-2026-11.09.05. Characters that Windows does not allow in file names, and spaces, become "-". When the access point has no uploader name, the folder name starts with "inbox". Folders delivered by older versions of tiCrypt keep their earlier form, for example "fred-Fri Oct 16 2026 11:09:05".

Deliveries are ordinary files in your Vault. If the inbox is tagged with a project, they take that tag. You can move them into a VM like any other Vault file, given the transfer permissions.

Every inbox link names your public key, and the upload page checks it before it encrypts anything. If your key changes, for example after a key reset or recovery, links created before the change stop accepting files: the sender sees "The recipient's encryption key does not match this link." Create new access points and send their links.

Tag Inboxes to a Project​

bulk-action

  1. Go to the Vault icon in the top left panel.
  2. Click the Inboxes section on the left panel.
  3. Select the inbox(es) you want to tag to a project.
  4. Click the Open full menu button in the top center panel.
  5. Select Change project.
  6. In the prompt, enter or select the project name to tag the inbox(es).
  7. Click Classify.
  8. If Recursively apply the permission change. is ticked (the default when the selection contains an inbox or other directory), review the summary pop-up and click Accept.
info

You can tag only the inboxes that you have access to. Tagging an inbox classifies the inbox folder, and everything delivered into it afterwards inherits that tag: both the folder created for each delivery and the files inside it carry the inbox's project. Senders need no project access for this to happen. To classify a delivery differently, use Change project on its files after reviewing them.

Forcefully Tag Inboxes to a Project​

bulk-action

  1. Go to the Vault icon in the top left panel.
  2. Click the Inboxes section on the left panel.
  3. Select the inbox(es) you want to forcefully tag to a project.
  4. Click the Open full menu button in the top center panel.
  5. Select Change project.
  6. In the prompt, enter or select the project name to tag the inbox(es).
  7. Tick Use my permission to override rules, re-tag resources with any visible project, regardless of current project relations to override the project rules for inboxes that are not part of the project.
  8. Click Force change with admin privilege.
  9. If Recursively apply the permission change. is ticked (the default when the selection contains an inbox or other directory), review the summary pop-up and click Accept.
note

Only users with the Tag anything with any project permission can perform forceful overrides of project tags.

Untag Inboxes from a Project​

bulk-action

  1. Go to the Vault icon in the top left panel.
  2. Click the Inboxes section on the left panel.
  3. Select the inbox(es) you want to untag from a project.
  4. Click the Open full menu button in the top center panel.
  5. Select Change project.
  6. In the prompt, select No project (unlocked).
  7. Click Declassify.
  8. If Recursively apply the permission change. is ticked (the default when the selection contains an inbox or other directory), review the summary pop-up and click Accept.

Download Contents of Inboxes​

bulk-action

  1. Go to the Vault icon in the top left panel.
  2. Click the Inboxes section on the left panel.
  3. Select the inbox(es) you want to download.
  4. Click Download in the top center panel.
  5. In the prompt, preview the structure of the inbox(es).
  6. Select the destination of your download.
  7. Click Download.
warning

Downloading an inbox removes its tiCrypt encryption. You are responsible for securing the files after download.

Confirmations, Errors & Solutions
Inbox Download Confirmation

Downloading files (total-files-download-time). Finished at (local-time-of-the-download).

Downloading Inbox Warning

Downloading files removes tiCrypt encryption and protections. Ensure file security is your responsibility.

Confirm the Download

Click Download to confirm. Downloaded files are no longer protected by tiCrypt encryption, so store them securely.

Delete an Access Point in an Inbox​

  1. Go to the Vault icon in the top left panel.
  2. Click the My Files section on the left panel.
  3. Select the inbox you want to manage.
  4. Click the Open full menu button in the top center panel.
  5. Select Manage inbox.
  6. In the prompt, click the delete button on the right side of the access point.
  7. Click Close.

The delete button acts at once, without confirmation. The task steps through "Contacting SFTP server" and "Deleting SFTP portal" for an SFTP access point, then "Deleting access point in backend". When you delete the last access point of an inbox, the folder leaves the Inboxes section and becomes an ordinary folder. If that step fails, the message "Failed to unregister directory from Inboxes branch" appears.

Confirmations, Errors & Solutions
Deleted Access Point

Delete access point (duration), Finished at finish-time.

Delete Inboxes​

bulk-action

  1. Go to the Vault icon in the top left panel.
  2. Click the Inboxes section on the left panel.
  3. Select the inbox(es) you want to delete.
  4. Click the Open full menu button in the top center panel.
  5. Select Delete inbox.
  6. In the pop-up, click Yes to confirm.
info

Delete inbox removes all access points of the inbox and converts it back to a regular directory, so the delivered files stay in your Vault. Moving an inbox to the trash instead moves the directory and all its contents to the trash. To stop deliveries but keep the files, use Delete inbox.

You can also right-click an inbox folder in the tree and select Delete inbox. That pop-up is titled "Delete inbox?" and reads 'Are you sure you want to delete the inbox for "name"? This will remove all access points and convert it back to a regular directory.' It ends with "Deleted inbox for name" or "Failed to delete inbox for name".

Move an inbox​

Moving an inbox folder within your own folders keeps its access points and links. Two moves ask first, because they delete every access point:

  • To the trash: the pop-up is titled 'Move the inbox "name" to the trash?' and reads "Moving an inbox to the trash deletes all of its access points: their share links stop working, and the directory is removed from Inboxes. This cannot be undone." Click Move to trash to go ahead.
  • Between your folders and a group's, or between two groups: the pop-up is titled 'Move the inbox "name" to a group directory?' or 'Move the inbox "name" to your own directories?' and explains that inboxes cannot be converted between these places, so the move deletes all access points. Click Move and delete access points to go ahead.

Cancel either pop-up to leave the inbox where it is.

note

Inbox deliveries land in your Vault. From there you can transfer them into a virtual machine like any other Vault file, provided you hold the transfer permissions. You do not need to delete the inbox or its access points first.

Confirmations, Errors & Solutions
Deleted Inbox

Successfully deleted number-of-inboxes inbox(es)

Configure External SFTP Inbox Servers​

info
  • Registering the SFTP inbox server is an administrator task, done once per deployment in System Settings. It needs the Change system settings permission.
  • Users create their own SFTP inboxes afterwards; registering a server here is required before anyone can create SFTP-type inboxes.
  1. Go to the Management icon in the top left taskbar.
  2. Navigate to the Settings section.
  3. Click the System Settings in the left panel.
  4. In the top center, click the Servers card.
  5. Select the External Servers.
  6. In the right panel, under SFTP Inbox Endpoint Servers, enter the domain or IPv4 address to configure tiCrypt CORS.
  7. Click Add.
  8. Click Save.
Confirmations, Errors & Solutions
Settings Saved

Updated first-party external servers (for SFTP and Surveys) setting successfully!

Upload Large Files via SFTP Client​

Download SFTP Client​

  1. Go to the SFTP client website.
  2. Download the SFTP client locally.

Install SFTP Client​

  1. In the installation prompt, review the SFTP client License Agreement and click I Agree.
  2. Set software availability to All users (recommended), then click Next >.
  3. Select the components to install, then click Next.
  4. Select the installation path, verify the space required for installation, then click Next.
  5. Select the start menu folder for the program shortcut, then click Install.
  6. Once installed, click Finish.
  7. Open the SFTP client.
  8. View the menu and available options to register your host.

Register Host in SFTP Client​

  1. In the SFTP client, open the interface to register a new host.
  2. Go to tiCrypt and log in to your account.
  3. Navigate to the Virtual Machines icon in the top left taskbar.
  4. Click the VMs section on the top left panel.
  5. In the left panel, click the virtual machine to upload the large files to.
  6. Click the SFTP to VM card in the center, or select Open SFTP pathway from the ⋮ menu next to the virtual machine.
  7. In the pop-up, click the copy button next to each value to copy the username, password, host and port to your SFTP client.
  8. Go to the SFTP client host interface.
  9. Ensure protocols are set to SFTP File Transfer.
  10. Paste the host, port, user and password from tiCrypt into the corresponding fields.
  11. Connect to the tiCrypt VM via SFTP.

Transfer Files via SFTP Client​

  1. In the SFTP client window, find the local machine directories and the remote virtual machine directories.
  2. Drag and drop files from the local machine into the remote virtual machine via the SFTP client interface.
  3. Once done, navigate to the Virtual Machines icon in the top left taskbar.
  4. Click the VMs section on the top left panel.
  5. In the left panel, select the virtual machine you transferred the files to.
  6. Click the File explorer option in the center.
  7. View your transferred files in the drives and access directories of the virtual machine.
Confirmations, Errors & Solutions
SFTP Client Downloaded

Downloaded Successfully.

Microsoft Defender Blocked Your SFTP Client in Microsoft Edge

SFTP-clientversion-numbermac-or-windows-setup.operation-system-format has been blocked as a potentially unwanted app by Microsoft Defender SmartScreen.

Download Anyway
  1. In Microsoft Edge, click the Downloads button in the top right panel to view the SFTP client download error.
  2. Next to the error-download file, click the More actions button.
  3. Select Keep.
  4. In the pop-up, click Keep anyway.
  5. Click Open file.
Windows Cannot Access The File

Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item.

Allow File Access in Windows (v11)
  1. Go to START button in the bottom panel of your desktop.
  2. Next, select or search for Settings.
  3. In the left panel, click Privacy & Security.
  4. Next, under Security, select the first card Windows Security.
  5. Then click App & browser control.
  6. Under Reputation-based protection click the Review button.
  7. Click Low arrow next to Potentially unwanted app found.
  8. In the pop-up, click Yes to allow this app to make changes to your device.
  9. Scroll down and view the detected File-type:Win32/sftp-client-name_installer with status Active and click the Actions button on the right.
  10. Click Allow on device.
  11. In the pop-up, click Yes to allow the change.
  12. Navigate back to your browser, and click the Downloads section in the top right.
  13. Click the sftp-client-name_version-number_windows-setup.exe to open the downloaded SFTP client.
  14. Click Yes to allow this file to make changes to your device.
  15. Once done, follow the installation steps to proceed.

To Admin
If you are dealing with corrupt files, follow the instructions below.

  1. Go to START button in the bottom panel of your desktop.
  2. Search "Command Prompt".
  3. Select Run as administrator.
  4. In the command prompt, run sfc /scannow.
  5. Once verification is 100% complete, Windows Resource Protection reports that it found and repaired the corrupt files.
  6. Close the command prompt.
SFTP Client Could Not Connect to SFTP Server

Error: Could not connect to server.

Change Your Team
  1. In your connected virtual machine section, click the menu next to the selected virtual machine.
  2. Select Power.
  3. In the pop-up, select Normal Shutdown.
  4. Once the VM is shut down, click the menu next to the virtual machine.
  5. Select Edit.
  6. In the prompt, under Basic Information, Team, click the Close button to remove the existing associated team.
  7. Enter a different team you are a member of that has sufficient memory resources and cores.
Change Team Quota

If you cannot change your team, ask your admin to allow more cores, memory, and drive storage for your current team to perform the SFTP transfer.



To Admin
Ensure your team has enough resource quota for the SFTP transfers. To edit team quota, follow the steps in 

Edit Teams' Quotas.


Tunneling SFTP to VM Cannot Start in VM

Forwarding failed: exit status 1.

Match the Data to the VM's Project

The project tagging the VM does not allow anything into the VM that is not tagged by the same project. Match the incoming data to the machine, rather than removing the machine's classification.



  1. Confirm which project tags the VM. In your connected virtual machine section, click the menu next to the virtual machine and check its project.
  2. Tag the source data with that same project before transferring it. Files delivered through an inbox inherit the inbox's project tag, so a delivery into an inbox tagged with the VM's project is already classified; otherwise, classify the files with Change project first.
  3. If you are not a member of that project, ask a manager of the project or an admin to add you, and ask the VM owner to share any project-tagged drives you need.
  4. Retry the transfer: click the SFTP to VM card in the center, or select Open SFTP pathway from the ⋮ menu next to the virtual machine.

Do not declassify the VM to make the transfer succeed. A project tag is a compliance decision rather than a label, and removing it changes the regulatory status of everything already mounted on that machine. It also will not work: a project change on a running VM takes effect only after a restart, and the restart drops the SFTP session. See Why a project tag is a classification, not a label.



To Virtual Machine Owner
If the data genuinely belongs outside this project, start a VM from a configuration that carries no project tag and transfer it there instead.