imageserver.pw Logo
Zero-Knowledge Encryption

Secure, private, and fast
image hosting

Upload images with zero-knowledge encryption. Your files are encrypted and stored safely — only you control the keys.

  • AES‑256‑CBC at rest
  • No IP logging for regular access
  • Custom domains supported

Guest uploads will be deleted after 7 days. To keep your uploads online indefinitely, register here.

ShareX Integration

ShareX configuration

Import this preset to upload directly from ShareX.

imageserver.pw.sxcu 
{
  "Version": "15.0.0",
  "Name": "imageserver.pw",
  "DestinationType": "ImageUploader, TextUploader, FileUploader",
  "RequestMethod": "POST",
  "RequestURL": "https://imageserver.pw/upload",
  "Body": "MultipartFormData",
  "Headers": {
    "X-IMAGESERVER-AUTH-KEY": "your-auth-key"
  },
  "Arguments": {
    "urlStyle": "embed",
    "domains": "[\"default\"]",
    "title": "imageserver.pw",
    "color": "#F49A36",
    "version": "2"
  },
  "FileFormName": "file",
  "URL": "{json:url}",
  "DeletionURL": "{json:deletionUrl}",
  "ErrorMessage": "{json:error}"
}
1

Go to ShareX → Destinations → Custom Uploader Settings, then click Import → From Clipboard.

2

Replace your-auth-key with the key from your Account Dashboard and set your preferred domains.

3

For our standard domains use [\"default\"]. To use your own domain use [\"own\"].

4

Finally, select imageserver.pw as image, text and file uploader, then choose Custom Uploader under ShareX → Destinations.

Need a custom configuration?

Use our ShareX Config Creator to generate a personalized setup.

Support

Frequently asked questions

Everything you need to know about imageserver.pw

How does imageserver.pw encrypt my files?
When you upload a file, our server encrypts it using AES-256-CBC — an industry-standard encryption algorithm. A unique encryption key is generated for each upload and is never stored on our servers. Instead, the key is embedded directly in your shareable URL (after the ?key= parameter). This means only someone with the complete link can decrypt and view your file — without the key, the stored data is unreadable, even to us.
What file types and sizes are supported?
We support a wide range of file formats including images (PNG, JPG, GIF, SVG, WebP), videos (MP4, WebM), and text files. The maximum file size depends on your account — guest users have limited upload sizes, while registered users enjoy larger limits. Check your Account Dashboard for specific limits.
What's the difference between guest and registered uploads?

Guest uploads are automatically deleted after 7 days and have reduced file size limits. By creating a free account, you unlock permanent storage, larger upload limits, custom domains, ShareX integration with your personal API key, and access to your upload history.

Create your free account →
What data does imageserver.pw collect and log?

Privacy is our priority. We don't log IP addresses, geographic locations, or browser fingerprints for regular access. The only data we store is the association between your account and your uploads — and even then, we never store your encryption keys.

To protect against DDoS attacks and abuse, suspicious requests may be logged, challenged, or blocked by our CDN partner Cloudflare. For more details, please review our Privacy Policy.

How do I submit a takedown or abuse report?

imageserver.pw operates under German law and takes abuse seriously. You have two options to report content that violates our Terms of Service or applicable laws:

  • Quick Report: On any file preview page, click the "Report File" button to flag the content directly to our moderation team
  • Email: Send a detailed takedown request to [email protected]

Please include the specific URL(s), a description of the issue, and any relevant legal documentation. We aim to respond to valid requests within 24–48 hours.

Which domains are available for my uploads?
By default, all uploads are served from imageserver.pw. We may add additional community domains in the future. Registered users can also connect their own custom domains for a personalized experience.
How do I set up my own custom domain?

Setting up a custom domain is straightforward:

  1. Add a CNAME record in your DNS provider pointing to imageserver.pw
  2. Go to your Account Dashboard → Settings
  3. Click the "+" button next to Domains and enter your domain
  4. Wait 5–10 minutes for DNS propagation and validation

Use the Refresh button to check if your domain has been verified. Once validated, you can select it when uploading files via ShareX or the API.

How can I delete my uploaded files?

Every upload generates a unique deletion URL that you receive after uploading. You can use this link to permanently remove your file at any time — no account required.

If you're a registered user, you can also manage and delete your uploads directly from your Account Dashboard. When using ShareX, the deletion URL is automatically saved to your upload history.

How can I view and manage my encrypted uploads?

Your files are stored encrypted on our servers. Decryption happens entirely in your browser using end-to-end encryption — we never see your files or your private key.

Getting started

  1. Navigate to Dashboard → Settings and click "Set up Public Key" to generate your key pair
  2. In Dashboard → General, paste your Private Key (PKCS#8 PEM format) and click "Use Private Key"
  3. Your uploads will be fetched and decrypted locally — click any thumbnail to view the full image

Supported key formats

  • X25519 keys — Public: PEM SPKI format, Private: PKCS#8 PEM format
  • OpenSSH formats (e.g., ssh-ed25519) are not directly supported — use PEM/PKCS#8 or generate keys via the dashboard

Important: Legacy uploads

Only uploads made after you configured your public key include the encrypted per-upload password. Older uploads cannot be decrypted via the dashboard — you'll need the original shareable links.

Troubleshooting common errors

  • Decrypt failed (key) — Your private key doesn't match the public key used for that upload, or the key format is unsupported
  • Decrypt failed (fetch) — The encrypted file couldn't be retrieved (check your network connection)
  • Decrypt failed (AES) / OperationError — Key mismatch. Ensure you're using the correct private key; files uploaded before key setup won't work

Your privacy is guaranteed

Your private key never leaves your browser. We only store your public key and the encrypted password for each upload. If you lose your private key, encrypted files cannot be recovered.

Sharing your files

Public viewing links include the decryption key in the URL (?key=...). Share these links carefully — anyone with the full URL can view the file.

How do I integrate imageserver.pw with ShareX?

ShareX is a free, open-source screenshot and file sharing tool for Windows. To use it with imageserver.pw:

  1. Copy the ShareX configuration from the section above (or use our Config Creator)
  2. Open ShareX → Destinations → Custom Uploader Settings → Import → From Clipboard
  3. Replace your-auth-key with your API key from the Dashboard
  4. Set imageserver.pw as your default uploader under Destinations

That's it! Your screenshots and files will now be uploaded automatically with encryption.

Is there an API for developers?

Yes! Registered users get a personal API key that can be used to upload files programmatically. The API supports all features available through the web interface, including custom domains, embed settings, and encryption.

Check out our Upload API Documentation for endpoints, parameters, and code examples.

How is my account secured?
We use Discord OAuth for authentication, which means we never store your password. Your account is protected by Discord's security features, including optional two-factor authentication. Your API key can be regenerated at any time from your dashboard if you suspect it has been compromised.
Where is my data stored?
Our servers are located in Germany (EU), ensuring compliance with GDPR and European data protection standards. All files are encrypted at rest and served globally through Cloudflare's CDN for fast access worldwide.