--- title: Uploading private or protected files to the Media Library description: Sensitive files should not be attached to Resources or uploaded to the Media Library --- [![uConnect](https://s41911.pcdn.co/wp-content/uploads/logo.svg)](https://www.gouconnect.com/) - [Knowledge Base](https://support.gouconnect.com/) - [Career Everywhere](https://www.gouconnect.com/career-everywhere/) - [Community](https://www.gouconnect.com/career-everywhere/community/access/) - [Submit a Ticket](https://share.hsforms.com/10AUHU9-DRi-Bw3fdB-SUYA8bok) - [Support Portal Login](https://support.gouconnect.com/_hcms/mem/login) ✕ ## Submit a Ticket Loading support form... [Skip to content](https://support.gouconnect.com/articles/10492698-uploading-private-or-protected-files-to-the-media-library#main-content) Open main navigation Close main navigation What do you need help with today? - There are no suggestions because the search field is empty. 1. [uConnect Knowledge Base](https://support.gouconnect.com/articles) 2. [Publish Content](https://support.gouconnect.com/articles/publish-content) # Uploading private or protected files to the Media Library Files uploaded to the Media Library (including attachments to content types such as Resources) are uploaded to our public CDN, which is accessible to anyone with the direct file URL. If you need to upload files that are not intended to be publicly accessible, such as files with sensitive student information, you should not upload them to the Media Library. Instead, you can use a private file sharing service and link to the files from your VCC website. **In short, share a link to the sensitive file; not the file itself.** Your institution may already have a secure file sharing service that you can use. For instance, Google Workspace includes Google Drive; Microsoft 365 includes OneDrive. Files on these services can be configured to only allow access by specific people, such as students with an email address at `(your institution).edu`. If you need help finding a secure file hosting platform, please contact your institution's IT department. ## How does this work with SSO-protected or password-protected pages? The content of those posts and pages is protected, but the files themselves are still publicly accessible if someone figures out their exact URL. If you instead link to an off-site, secure file sharing service, access to the files can be restricted. For example, this resource is only accessible to logged-in users: `https://premiumdemo.demo.uconnectlabs.com/resources/protected-resource/`. Any **content** on the page is protected. However, the file attached to the resource can be found at `https://premiumdemo.demo.uconnectlabs.com/wp-content/uploads/sites/113/2025/01/secret-file.docx` and downloaded even if the user is logged out. The file is not easy to find, but it's still not protected. ## What if I just use an obscure filename? The CDN uses a predictable URL structure, so even if you use a long or complex filename, it is still possible for a person (or a bot) to guess the URL and access the file. "Security through obscurity" is not a reliable method of protecting files. ## Is my other information protected? What about other sensitive files, like SIS uploads or outcome data? Configuration data is not stored in the Media Library and is still safe to upload through settings pages in your dashboard or secure channels such as an S3 bucket. - [Get Started](https://support.gouconnect.com/articles/get-started) - [AI Search](https://support.gouconnect.com/articles/ai-search) - [Analytics & Data](https://support.gouconnect.com/articles/analytics-data#main-content) - [Outcomes Data](https://support.gouconnect.com/articles/analytics-data#outcomes-data) - [Platform Analytics](https://support.gouconnect.com/articles/analytics-data#platform-analytics) - [Google Analytics](https://support.gouconnect.com/articles/analytics-data#google-analytics) - [Publish Content](https://support.gouconnect.com/articles/publish-content) - [Manage Your Communities & Content Categories](https://support.gouconnect.com/articles/manage-your-communities-content-categories#main-content) - [Communities](https://support.gouconnect.com/articles/manage-your-communities-content-categories#communities) - [Content Categories](https://support.gouconnect.com/articles/manage-your-communities-content-categories#content-categories) - [Manage Subscribers & Users](https://support.gouconnect.com/articles/manage-subscribers-users) - [Platform Design](https://support.gouconnect.com/articles/platform-design#main-content) - [Widgets](https://support.gouconnect.com/articles/platform-design#widgets) - [Block Editor (WordPress)](https://support.gouconnect.com/articles/platform-design#block-editor-wordpress) - [Menus](https://support.gouconnect.com/articles/platform-design#menus) - [Accessibility Hub](https://support.gouconnect.com/articles/accessibility-hub#main-content) - [Block Editor](https://support.gouconnect.com/articles/accessibility-hub#block-editor) - [Market Your Platform](https://support.gouconnect.com/articles/market-your-platform#main-content) - [Activation and Promotion Guides](https://support.gouconnect.com/articles/market-your-platform#activation-and-promotion-guides) - [Modules & Integrations](https://support.gouconnect.com/articles/modules-integrations#main-content) - [Outcomes Data Visualization](https://support.gouconnect.com/articles/modules-integrations#outcomes-data-visualization) - [Technical Configurations](https://support.gouconnect.com/articles/technical-configurations#main-content) - [Automated Subscriber Uploads (SIS)](https://support.gouconnect.com/articles/technical-configurations#automated-subscriber-uploads-sis) - [Product Updates](https://support.gouconnect.com/articles/product-updates) - [Customer Training Recordings](https://support.gouconnect.com/articles/customer-training-recordings) - [Candid Career+](https://support.gouconnect.com/articles/candid-career) - [General](https://support.gouconnect.com/articles/general)    [![uConnect Logo](https://s41911.pcdn.co/wp-content/uploads/logo-white.svg)](https://www.gouconnect.com/) - [Customers](https://www.gouconnect.com/customers/) - [Case Studies](https://www.gouconnect.com/customers/case-studies/) - [Client Directory](https://www.gouconnect.com/customers/client-directory/) - [Testimonials](https://www.gouconnect.com/customers/testimonials/) - [Product](https://www.gouconnect.com/product/) - [Use Cases](https://www.gouconnect.com/product/use-cases/) - [Integrations](https://www.gouconnect.com/product/integrations/) - [Become a Partner](https://www.gouconnect.com/company/partner/) - [Company](https://www.gouconnect.com/company/) - [Careers](https://www.gouconnect.com/company/careers/) - [News](https://www.gouconnect.com/company/news/) - [Status Page](https://status.gouconnect.com/) - [Career Everywhere](https://www.gouconnect.com/career-everywhere/) - [The Movement](https://www.gouconnect.com/career-everywhere/movement/) - [Community](https://www.gouconnect.com/career-everywhere/community/access/) - [Podcast](https://www.gouconnect.com/career-everywhere/podcast/) © 2026 uConnect Inc. [Accessibility Policy](https://www.gouconnect.com/accessibility-policy/) · [Privacy Policy](https://www.gouconnect.com/privacy-policy/)