# Signed URLs are now available for Vercel Blob

DevFeed: [Signed URLs are now available for Vercel Blob](<https://devfeed.tech/articles/signed-urls-are-now-available-for-vercel-blob-1098.md>)

Original publisher: [Read original article](<https://vercel.com/changelog/signed-urls-are-now-available-for-vercel-blob>)

Author: Elliot Dauber

Published: 2026-06-02T00:00:00Z

Content type: release

Language: en

Sources: [Vercel News](<https://devfeed.tech/sources/vercel-news.md>)

Topics: [Vercel](<https://devfeed.tech/topics/vercel.md>), [browser](<https://devfeed.tech/topics/browser.md>), [OpenID connect (OIDC)](<https://devfeed.tech/topics/oidc.md>), [servers](<https://devfeed.tech/topics/servers.md>)

Tags: [browser](<https://devfeed.tech/tags/browser.md>), [documentation](<https://devfeed.tech/tags/documentation.md>), [oidc](<https://devfeed.tech/tags/oidc.md>), [server](<https://devfeed.tech/tags/server.md>), [storage](<https://devfeed.tech/tags/storage.md>), [update](<https://devfeed.tech/tags/update.md>), [vercel](<https://devfeed.tech/tags/vercel.md>)

## AI overview

Vercel Blob now supports time-bound signed URLs for scoped upload, download, inspection, and deletion of individual objects. URLs can be restricted by operation and pathname, expire within up to seven days, support browser-based multipart uploads, and allow conditional deletes using ETags. The feature works with OIDC so long-lived storage tokens remain on the server.

## Source excerpt

You can now generate time-bound signed URLs for Vercel Blob. A signed URL is a scoped URL with an expiry that allows you to upload, download, inspect, or delete a specific object without giving access to your entire Blob store. Each URL is scoped to a single operation (put, get, head, or delete), a single pathname, and an expiry you choose, up to 7 days. The signature covers the operation and constraints, so a URL signed for a GET can't be reused as a PUT. Direct uploads from the browser Upload URLs (put) support multipart, so the browser can stream large files straight to Blob storage without round-tripping through your server. Conditional deletes Delete URLs accept an ifMatch option so the delete only applies if the object hasn't been overwritten since you signed the URL: Signed URLs work alongside OIDC. Your server authenticates to Blob via OIDC, generates a signed token, and produces narrowly scoped, time-bound URLs for the browser, so your long-lived BLOB_READ_WRITE_TOKEN never leaves the server. Update @vercel/blob to 2.4.0 and read the documentation to get started. Read more