mxops INGRESS Admin login
SECURE FILE INTAKE FOR MXOPS.IO

Every file needs a lock.
Not every sender needs an account.

mxops Ingress is a private portal for asking people for files and sending files out. Everything is encrypted the moment it arrives, outsiders prove who they are with a code sent to their inbox, and files shred themselves when they expire.

WHAT IT DOES

One controlled way in. One controlled way out.

REQUEST

Ask anyone for files

Send a private upload link. They type the address you invited, confirm a one-time code from that inbox, and upload with a note. Allow 1 to 10 uploads per link.

SEND

Send files that unlock by code

Each recipient gets their own link and a code sent to their inbox. Set an expiry and a download limit; revoke any time. A forwarded link is useless on its own.

ENCRYPT

Sealed on arrival

Every file gets its own AES-256-GCM key and is encrypted as it streams in. File names, messages and comments are encrypted too, and never appear in emails.

WORKSPACES

A private workspace per admin

Each invited admin gets their own files, contacts, templates and settings, under their own encryption key. Nobody else's workspace is visible to them.

PASSKEYS

No passwords to steal

Admins sign in with a passkey: Face ID, Touch ID or Windows Hello. Passkeys can't be phished, and sensitive changes ask for a fresh check.

CONSOLE

An admin console that stays out of the way

Contacts and groups, request and send templates, emails branded with your company name in HTML or plain text, retention and limits, server health, and a full audit log.

HOW IT WORKS

Three steps. No accounts for outsiders.

  1. 01 / LINK

    You request or send

    Pick people from your contacts or type an address. They get an email with a private link and no file names in it.

  2. 02 / VERIFY

    They prove it's them

    A one-time code goes to their inbox. It expires in 10 minutes and works once.

  3. 03 / SHRED

    Files expire on schedule

    When a transfer expires or you revoke it, its files and keys are destroyed. The audit trail stays.

SECURITY

Built small on purpose.

Self-hosted, with zero third-party packages. Every rule lives on the server, and every sign-in, code, upload and download is logged.

FILES
AES-256-GCM per file, in authenticated 64 KiB segments
IN TRANSIT
TLS 1.3 with post-quantum key exchange where the browser supports it
ADMIN SIGN-IN
Passkeys first, an emailed code as the backup, and a fresh passkey check for sensitive changes
OUTSIDERS
Private link plus a one-time inbox code: 10 minutes, 5 tries, one use
EXPIRY
Expired and revoked transfers lose their files and keys
EMAIL
Microsoft 365, send-only, limited to one mailbox