tiCrypt 2.17.15

Inboxes

ResearcherRequires: User role

Permission requirements

• Basic Vault Interaction
  • View directories
  • Create directories
• Basic Inbox Interaction
  • View own inboxes
  • Create inboxes
  • Delete inboxes

info

Inboxes are one of several data ingress methods in tiCrypt. For the full picture, see Data Ingress and Egress.

Access Inboxes

1. Go to the Vault icon in the top left panel.
2. Click the Inboxes section on the left panel.
3. View a list of all the inboxes you have created.

Create an Inbox

Method One

1. Go to the Vault icon in the top left panel.
2. Click the Inboxes section on the left panel.
3. Click the Create inbox button in the top panel.
4. In the prompt, enter the inbox name and select the parent directory.
5. Next, set the inbox type to URL.
6. Enter the inbox expiration date and capacity.
7. Next, enter the uploader's name and a message for them.
8. Click Create Inbox.
9. Select the new inbox, click the Open full menu button, and select Manage inbox.
10. Click the uploader's name to view their message preview.
11. Click Copy to copy the inbox URL.
12. Share the generated link with the uploader.

Method Two

1. Go to the Vault icon in the top left panel.
2. Click the My Files section on the left panel.
3. Select the directory you want to turn into an inbox.
4. Click the Open full menu button in the top center panel.
5. Select Manage inbox.
6. In the prompt, click the Create new access point button in the top right corner.
7. Set the inbox type to URL.
8. Enter the inbox expiration date and capacity.
9. Next, enter the uploader's name and a message for them.
10. Click Create Inbox.
11. Once the access point is created, click the uploader's name to view their message preview.
12. Click Copy to copy the inbox URL.
13. Share the generated link with the uploader.

note

• The Uploader is the external individual who uploads data into tiCrypt via inboxes.
• You can create a new directory and convert it into a new inbox.

info

• You may need to enter your password before creating an inbox. This happens when your private key timer has expired and the key is no longer held in memory. Any action that requires your private key will prompt for your password to decrypt it again.

tip

Set an expiration date for all inboxes.

Confirmations, Errors & Solutions

Inbox Creation Confirmation

Inbox created successfully.

Copied URL Successfully

URL copied.

Did not Enter Inbox Name

You must enter a name for the inbox directory.

Enter Inbox Name

In the inbox creation prompt, enter the inbox name in the Name of inbox field.

Did not Enter Expiration Date

You must enter an expiration date.

Enter Expiration Date

In the inbox creation prompt, enter the expiration date in the Specifications section.

Did not Enter Upload Limit

You must enter a limit for how many bytes may be uploaded.

Enter Upload Limit

In the inbox creation prompt, enter the upload limit in the Specifications section, then select either GB or TB as the unit.

Create Inbox Button Inactive

Create Inbox button still inactive, after you entered the inbox name, expiration date and upload limit.

Select Parent Directory

In the inbox creation prompt, select the parent directory where the inbox will be located in the Select parent directory for inbox section.

Upload Files and Directories into an Inbox

bulk-action

1. An inbox URL has been shared with you.
2. Paste the link into the browser.
3. If the page shows This mailbox is password protected., enter the password you were given and click Enter inbox.
4. Click Select Files or Select Directories, or drag files and directories onto the window.
5. Review the staged list. To drop an item before sending, click the Delete button next to it.
6. Click Upload, which shows the number of staged files (for example Upload 3 files).
7. When the page shows All files uploaded, close the tab.

note

• Select more files or directories at any time before uploading to add them to the list.
• The uploader can view the name and email of the tiCrypt user who opened the access point for them, the inbox expiration date, the message for them, and the remaining space for upload.
• Uploads cannot be undone by the sender: the page has no way to read back or delete files once they are sent.

info

The URL must be shared with the external individual through a separate channel, such as email.

Confirmations, Errors & Solutions

Upload Confirmation

Uploaded.

All Files Uploaded

All files uploaded

Red Background in File or Directory List

The row of a file or directory that failed turns red and shows a icon.

Review Upload

Hover over the icon in the row to read the error for that file or directory.

Not Uploaded Warning

Not uploaded

Send Staged Files

Not uploaded marks a staged file that has not been sent yet. Click Upload N files (N is the number of staged files) to send the staged files.

Entered Wrong Password as Uploader

Incorrect password. Please try again.

Re-enter the Correct Password

Re-enter the correct password in the password-protected inbox link. If access is still denied, contact the inbox owner for assistance.

Upload Exceeds Allowed Size Limit

Not enough space for all uploads.

Contact the Inbox Creator

Contact the inbox creator to request a new access point with sufficient space. Alternatively, upload files in smaller batches until all files are transferred.

Request Entity Too Large

Your browser may display a 413 Request Entity Too Large error.

Upload Smaller Size Files/Directories Or Ask Inbox Creator

The total upload exceeded the inbox size limit, resulting in a partial upload. Only some files and directories were uploaded. Ask the inbox creator for a larger inbox.

Create an SFTP Inbox

Method One

1. Go to the Vault icon in the top left panel.
2. Click the Inboxes section on the left panel.
3. Click the Create inbox button in the top panel.
4. In the prompt, enter the inbox name and select the parent directory.
5. Next, set the inbox type to SFTP.
6. Select the SFTP Server and enter an SFTP Username of up to 20 English letters. The sender logs in with this username.
7. Enter the inbox expiration date and capacity.
8. Next, enter the uploader's name and a message for them.
9. Click Create Inbox.
10. Select the new inbox, click the Open full menu button, and select Manage inbox.
11. Click the uploader's name to view their message preview.
12. Click Copy to copy the SFTP link to share.
13. Share the generated link with the uploader.

Method Two

1. Go to the Vault icon in the top left panel.
2. Click the My Files section on the left panel.
3. Select the directory you want to turn into an inbox.
4. Click the Open full menu button in the top center panel.
5. Select Manage inbox.
6. In the prompt, click the Create new access point button in the top right corner.
7. Set the inbox type to SFTP.
8. Select the SFTP Server and enter an SFTP Username of up to 20 English letters. The sender logs in with this username.
9. Enter the inbox expiration date and capacity.
10. Next, enter the uploader's name and a message for them.
11. Click Create Inbox.
12. Once the access point is created, click the uploader's name to view their message preview.
13. Click Copy to copy the SFTP link to share.
14. Share the generated link with the uploader.

info

SFTP inboxes are created by users, not administrators: anyone whose profile includes Create inboxes can create one once an administrator has registered the SFTP inbox server. When the sender opens the link, they see the SFTP host, port, this username, and a generated password that stays valid for 30 minutes. Opening the link again after that issues a new password.

note

An SFTP inbox only receives files. Sending files out of tiCrypt over SFTP is a separate feature: a Super-admin must first allowlist the destination server for you or your team. See External SFTP Servers.

Confirmations, Errors & Solutions

SFTP Inbox Creation Confirmation

Inbox created successfully.

Copied URL Successfully

URL copied.

Did not Enter Inbox Name

You must enter a name for the inbox directory.

Enter Inbox Name

In the inbox creation prompt, enter the inbox name in the Name of inbox field.

Did not Enter SFTP Name

You must enter a username.

Enter Inbox SFTP Username

In the inbox creation prompt, enter the SFTP Username in the Type of inbox section.

Did not Enter Expiration Date

You must enter an expiration date.

Enter Expiration Date

In the inbox creation prompt, enter the expiration date in the Specifications section.

Did not Enter Upload Limit

You must enter a limit for how many bytes may be uploaded.

Enter Upload Limit

In the inbox creation prompt, enter the upload limit in the Specifications section, then select either GB or TB as the unit.

Create Inbox Button Inactive

Create Inbox button still inactive, after you entered the inbox name, expiration date and upload limit.

Select Parent Directory

In the inbox creation prompt, select the parent directory where the inbox will be located in the Select parent directory for inbox section.

Create a Password-Enabled Inbox

Method One

1. Go to the Vault icon in the top left panel.
2. Click the Inboxes section on the left panel.
3. Click the Create inbox button in the top panel.
4. In the prompt, enter the inbox name and select the parent directory.
5. Next, set the inbox type to URL.
6. Tick Enable password protection for this access point.
7. Enter the inbox password twice, in Password and Repeat Password.
8. Next, enter the inbox expiration date and capacity.
9. Then, enter the uploader's name and a message for them.
10. Click Create Inbox.
11. Select the new inbox, click the Open full menu button, and select Manage inbox.
12. Click the uploader's name to view their message preview.
13. Click Copy to copy the inbox URL.
14. Share the generated link with the uploader.

Method Two

1. Go to the Vault icon in the top left panel.
2. Click the My Files section on the left panel.
3. Select the directory you want to turn into an inbox.
4. Click the Open full menu button in the top center panel.
5. Select Manage inbox.
6. In the prompt, click the Create new access point button in the top right corner.
7. Set the inbox type to URL.
8. Tick Enable password protection for this access point.
9. Enter the inbox password twice, in Password and Repeat Password.
10. Next, enter the inbox expiration date and capacity.
11. Then, enter the uploader's name and a message for them.
12. Click Create Inbox.
13. Once the access point is created, click the uploader's name to view their message preview.
14. Click Copy to copy the inbox URL.
15. Share the generated link with the uploader.

info

• The uploader must provide the inbox password to upload files or directories into your inbox.
• When creating a password-based access point, the password cannot be changed or viewed once created.

Confirmations, Errors & Solutions

Inbox Creation Confirmation

Inbox created successfully.

Access Point Password Protection

This access point is password-protected. The password cannot be viewed after creating an access point.

Copied URL Successfully

URL copied.

Did not Enter Proper Password

Add another word or two. Uncommon words are better.

Enter a Longer Password

In the inbox creation prompt, enter a longer password in the Type of inbox section.

Did not Enter The Same Password

Passwords do not match.

Re-Enter Both Password and Confirmation

In the inbox creation prompt, re-enter the password and the password confirmation in the Type of inbox section.

Create Inbox Button Inactive

Create Inbox button still inactive, after you entered the inbox name, password, password confirmation, expiration date and upload limit.

Select Parent Directory

In the inbox creation prompt, select the parent directory where the inbox will be located in the Select parent directory for inbox section.

Change an Inbox Access Point

1. Go to the Vault icon in the top left panel.
2. Click the My Files section on the left panel.
3. Select the inbox you want to manage.
4. Click the Open full menu button in the top center panel.
5. Select Manage inbox.
6. In the prompt, click the delete button on the right side of the access point you want to replace.
7. Click the Create new access point button in the top right corner.
8. Select the inbox type, then re-enter a new inbox expiration date and capacity.
9. Re-enter the uploader's name and a message for them.
10. Click Create Inbox.

Confirmations, Errors & Solutions

Access Point Creation

Access point created successfully.

Copied URL Successfully

URL copied.

Message For Uploader Used Restricted Symbols

May not contain

'<', '>', '{', or '}'

Re-enter Message for Uploader Without Special Symbols

In the inbox creation prompt, re-enter the message for the uploader in the Information for recipient (optional) section, avoiding the special characters listed above.

Manage Multiple Inbox Access Points

bulk-action

1. Once the first access point has been created, view the pop-up.
2. Click the Create new access point button in the top right corner.
3. For the new access point, select the inbox type URL or SFTP.
4. Enter the inbox expiration date and capacity.
5. Enter the uploader's name and a message for them.
6. Click Create Inbox.
7. Repeat this process to create additional access points as needed.
8. Click Copy to copy the details of the appropriate access point.
9. Share the details with the appropriate uploader.
10. Once done, click Close.

tip

Hover over the Link to share text to preview your full inbox access point link.

Tag Inboxes to a Project

bulk-action

1. Go to the Vault icon in the top left panel.
2. Click the Inboxes section on the left panel.
3. Select the inbox(es) you want to tag to a project.
4. Click the Open full menu button in the top center panel.
5. Select Change project.
6. In the prompt, enter or select the project name to tag the inbox(es).
7. Click Classify.
8. If Recursively apply the permission change. is ticked (the default when the selection contains an inbox or other directory), review the summary pop-up and click Accept.

info

You can tag only the inboxes that you have access to. Tagging an inbox classifies the inbox folder, and everything delivered into it afterwards inherits that tag: both the folder created for each delivery and the files inside it carry the inbox's project. Senders need no project access for this to happen. To classify a delivery differently, use Change project on its files after reviewing them.

Forcefully Tag Inboxes to a Project

bulk-action

1. Go to the Vault icon in the top left panel.
2. Click the Inboxes section on the left panel.
3. Select the inbox(es) you want to forcefully tag to a project.
4. Click the Open full menu button in the top center panel.
5. Select Change project.
6. In the prompt, enter or select the project name to tag the inbox(es).
7. Tick Use my permission to override rules, re-tag resources with any visible project, regardless of current project relations to override the project rules for inboxes that are not part of the project.
8. Click Force change with admin privilege.
9. If Recursively apply the permission change. is ticked (the default when the selection contains an inbox or other directory), review the summary pop-up and click Accept.

note

Only users with the Arbitrarily tag resources with any project permission can perform forceful overrides of project tags.

Untag Inboxes from a Project

bulk-action

1. Go to the Vault icon in the top left panel.
2. Click the Inboxes section on the left panel.
3. Select the inbox(es) you want to untag from a project.
4. Click the Open full menu button in the top center panel.
5. Select Change project.
6. In the prompt, select No project (unlocked).
7. Click Declassify.
8. If Recursively apply the permission change. is ticked (the default when the selection contains an inbox or other directory), review the summary pop-up and click Accept.

Download Contents of Inboxes

bulk-action

1. Go to the Vault icon in the top left panel.
2. Click the Inboxes section on the left panel.
3. Select the inbox(es) you want to download.
4. Click Download in the top center panel.
5. In the prompt, preview the structure of the inbox(es).
6. Select the destination of your download.
7. Click Download.

warning

Downloading an inbox removes its tiCrypt encryption. You are responsible for securing the files after download.

Confirmations, Errors & Solutions

Inbox Download Confirmation

Downloading files (total-files-download-time). Finished at (local-time-of-the-download).

Downloading Inbox Warning

Downloading files removes tiCrypt encryption and protections. Ensure file security is your responsibility.

Confirm the Download

Click Download to confirm. Downloaded files are no longer protected by tiCrypt encryption, so store them securely.

Delete an Access Point in an Inbox

1. Go to the Vault icon in the top left panel.
2. Click the My Files section on the left panel.
3. Select the inbox you want to manage.
4. Click the Open full menu button in the top center panel.
5. Select Manage inbox.
6. In the prompt, click the delete button on the right side of the access point.
7. Click Close.

Confirmations, Errors & Solutions

Deleted Access Point

Delete access point (duration), Finished at finish-time.

Delete Inboxes

bulk-action

1. Go to the Vault icon in the top left panel.
2. Click the Inboxes section on the left panel.
3. Select the inbox(es) you want to delete.
4. Click the Open full menu button in the top center panel.
5. Select Delete inbox.
6. In the pop-up, click Yes to confirm.

info

Delete inbox removes all access points of the inbox and converts it back to a regular directory, so the delivered files stay in your Vault. Moving an inbox to the trash instead moves the directory and all its contents to the trash. To stop deliveries but keep the files, use Delete inbox.

note

Inbox deliveries land in your Vault. From there you can transfer them into a virtual machine like any other Vault file, provided you hold the transfer permissions. You do not need to delete the inbox or its access points first.

Confirmations, Errors & Solutions

Deleted Inbox

Successfully deleted number-of-inboxes inbox(es)

Configure External SFTP Inbox Servers

info

• Registering the SFTP inbox server is an administrator task, done once per deployment in System Settings. It needs the Edit (or create) system settings permission.
• Users create their own SFTP inboxes afterwards; registering a server here is required before anyone can create SFTP-type inboxes.

1. Go to the Management icon in the top left taskbar.
2. Navigate to the Settings section.
3. Click the System Settings in the left panel.
4. In the top center, click the Servers card.
5. Select the External Servers.
6. In the right panel, under SFTP Inbox Endpoint Servers, enter the domain or IPv4 address to configure tiCrypt CORS.
7. Click Add.
8. Click Save.

Confirmations, Errors & Solutions

Settings Saved

Updated first-party external servers (for SFTP and Surveys) setting successfully!

Upload Large Files via SFTP Client

Download SFTP Client

1. Go to the SFTP client website.
2. Download the SFTP client locally.

Install SFTP Client

3. In the installation prompt, review the SFTP client License Agreement and click I Agree.
4. Set software availability to All users (recommended), then click Next >.
5. Select the components to install, then click Next.
6. Select the installation path, verify the space required for installation, then click Next.
7. Select the start menu folder for the program shortcut, then click Install.
8. Once installed, click Finish.
9. Open the SFTP client.
10. View the menu and available options to register your host.

Register Host in SFTP Client

13. In the SFTP client, open the interface to register a new host.
14. Go to tiCrypt and log in to your account.
15. Navigate to the Virtual Machines icon in the top left taskbar.
16. Click the VMs section on the top left panel.
17. In the left panel, click the virtual machine to upload the large files to.
18. Click the Open SFTP pathway option in the center.
19. In the pop-up, click the copy button next to each value to copy the username, password, host and port to your SFTP client.
20. Go to the SFTP client host interface.
21. Ensure protocols are set to SFTP File Transfer.
22. Paste the host, port, user and password from tiCrypt into the corresponding fields.
23. Connect to the tiCrypt VM via SFTP.

Transfer Files via SFTP Client

29. In the SFTP client window, find the local machine directories and the remote virtual machine directories.
30. Drag and drop files from the local machine into the remote virtual machine via the SFTP client interface.
31. Once done, navigate to the Virtual Machines icon in the top left taskbar.
32. Click the VMs section on the top left panel.
33. In the left panel, select the virtual machine you transferred the files to.
34. Click the File explorer option in the center.
35. View your transferred files in the drives and access directories of the virtual machine.

Confirmations, Errors & Solutions

SFTP Client Downloaded

Downloaded Successfully.

Microsoft Defender Blocked Your SFTP Client in Microsoft Edge

SFTP-clientversion-numbermac-or-windows-setup.operation-system-format has been blocked as a potentially unwanted app by Microsoft Defender SmartScreen.

Download Anyway

1. In Microsoft Edge, click the Downloads button in the top right panel to view the SFTP client download error.
2. Next to the error-download file, click the More actions button.
3. Select Keep.
4. In the pop-up, click Keep anyway.
5. Click Open file.

Windows Cannot Access The File

Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item.

Allow File Access in Windows (v11)

1. Go to START button in the bottom panel of your desktop.
2. Next, select or search for Settings.
3. In the left panel, click Privacy & Security.
4. Next, under Security, select the first card Windows Security.
5. Then click App & browser control.
6. Under Reputation-based protection click the Review button.
7. Click Low arrow next to Potentially unwanted app found.
8. In the pop-up, click Yes to allow this app to make changes to your device.
9. Scroll down and view the detected File-type:Win32/sftp-client-name_installer with status Active and click the Actions button on the right.
10. Click Allow on device.
11. In the pop-up, click Yes to allow the change.
12. Navigate back to your browser, and click the Downloads section in the top right.
13. Click the sftp-client-name_version-number_windows-setup.exe to open the downloaded SFTP client.
14. Click Yes to allow this file to make changes to your device.
15. Once done, follow the installation steps to proceed.

To Admin
If you are dealing with corrupt files, follow the instructions below.

1. Go to START button in the bottom panel of your desktop.
2. Search "Command Prompt".
3. Select Run as administrator.
4. In the command prompt, run sfc /scannow.
5. Once verification is 100% complete, Windows Resource Protection reports that it found and repaired the corrupt files.
6. Close the command prompt.

SFTP Client Could Not Connect to SFTP Server

Error: Could not connect to server.

Change Your Team

1. In your connected virtual machine section, click the menu next to the selected virtual machine.
2. Select Power.
3. In the pop-up, select Normal Shutdown.
4. Once the VM is shut down, click the menu next to the virtual machine.
5. Select Edit.
6. In the prompt, under Basic Information, Team, click the Close button to remove the existing associated team.
7. Enter a different team you are a member of that has sufficient memory resources and cores.

Change Team Quota

If you cannot change your team, ask your admin to allow more cores, memory, and drive storage for your current team to perform the SFTP transfer.

To Admin
Ensure your team has enough resource quota for the SFTP transfers. To edit team quota, follow the steps in 

Edit Teams' Quotas.

Tunneling SFTP to VM Cannot Start in VM

Forwarding failed: exit status 1.

Match the Data to the VM's Project

The project tagging the VM does not allow anything into the VM that is not tagged by the same project. Match the incoming data to the machine, rather than removing the machine's classification.

1. Confirm which project tags the VM. In your connected virtual machine section, click the menu next to the virtual machine and check its project.
2. Tag the source data with that same project before transferring it. Files delivered through an inbox inherit the inbox's project tag, so a delivery into an inbox tagged with the VM's project is already classified; otherwise, classify the files with Change project first.
3. If you are not a member of that project, ask a manager of the project or an admin to add you, and ask the VM owner to share any project-tagged drives you need.
4. Retry the transfer: click the Open SFTP pathway option in the center.

Do not declassify the VM to make the transfer succeed. A project tag is a compliance decision rather than a label, and removing it changes the regulatory status of everything already mounted on that machine. It also will not work: a project change on a running VM takes effect only after a restart, and the restart drops the SFTP session. See Why a project tag is a classification, not a label.

To Virtual Machine Owner
If the data genuinely belongs outside this project, start a VM from a configuration that carries no project tag and transfer it there instead.