# Is using a GUID for an uploaded filename secure?

**URL:** <https://meta.discourse.org/t/is-using-a-guid-for-an-uploaded-filename-secure/67062>\
**Category:** Development\
**Created:** [July 29, 2017, 11:53am UTC](https://meta.discourse.org/t/is-using-a-guid-for-an-uploaded-filename-secure/67062 "2017-07-29T11:53:48Z")\
**Posts on this page:** 1\
**Showing post:** 10

<div class="post-metadata">

**Author:** ![Vitaly](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/vitaly/32/120475_2.png) [@Vitaly](https://meta.discourse.org/u/Vitaly)\
**Post date:** [July 29, 2017, 12:09pm UTC](https://meta.discourse.org/t/is-using-a-guid-for-an-uploaded-filename-secure/67062/10 "2017-07-29T12:09:52Z")

</div>

> [@fefrei](#):
>
> Both models hinge on the assumption that some string is not guessed.

No. Link with public access will be shared in unpredictable ways. You can not provide security at this step. So, you can not rely on assumption that your “secret link” will be secret forever, this can go out of your control.

---

_[View the full topic](https://meta.discourse.org/t/is-using-a-guid-for-an-uploaded-filename-secure/67062)._