# Vercel Private Blob is now generally available

DevFeed: [Vercel Private Blob is now generally available](<https://devfeed.tech/articles/vercel-private-blob-is-now-generally-available-1167.md>)

Original publisher: [Read original article](<https://vercel.com/changelog/vercel-private-blob-is-now-generally-available>)

Author: Can Temizyurek

Published: 2026-06-30T00:00:00Z

Content type: release

Language: en

Sources: [Vercel News](<https://devfeed.tech/sources/vercel-news.md>)

Topics: [Vercel](<https://devfeed.tech/topics/vercel.md>), [API](<https://devfeed.tech/topics/api.md>), [OpenID connect (OIDC)](<https://devfeed.tech/topics/oidc.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>), [Terminal](<https://devfeed.tech/topics/terminal.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [cli](<https://devfeed.tech/tags/cli.md>), [oidc](<https://devfeed.tech/tags/oidc.md>), [release](<https://devfeed.tech/tags/release.md>), [terminal](<https://devfeed.tech/tags/terminal.md>), [upgrade](<https://devfeed.tech/tags/upgrade.md>), [vercel](<https://devfeed.tech/tags/vercel.md>)

## AI overview

Vercel Private Blob is generally available on all plans, adding private stores, Signed URLs, and OIDC authentication for controlled access to sensitive files. The release supports short-lived project-scoped tokens, CLI access without long-lived credentials, and temporary object permissions for clients and external services.

## Source excerpt

Vercel Private Blob is now generally available for all plans. Store sensitive files like user-uploaded photos, invoices, and agent memory, and control exactly who can read them. Private stores, Signed URLs, and OIDC authentication all graduate from beta with this release. Vercel Private Blob uses the same Blob API as public blobs. Specify access: 'private' when uploading a blob: OIDC authentication Functions running on Vercel now authenticate to Vercel Private Blob with a short-lived, auto-rotating OIDC token scoped to the project, with no static read-write token in your environment. The Vercel CLI also supports OIDC authentication, so you can read from and write to a private store from your terminal without a long-lived token. For stores still using a static token, you can upgrade to OIDC and revoke the old credential from the dashboard. Signed URLs Mint a URL scoped to a single operation, pathname, and an expiration date you choose for up to 7 days, then hand it to a client to perform a PUT, GET, HEAD, or DELETE operation on a single object, without ever exposing your store credentials. Signed URLs work well when you want to grant temporary, narrow access to a private object without putting your server in the data path: Let a user download a private file, like an invoice, a report, or an export, with a link that expires. Share an object with a third party or external service for a fixed window. Hand an agent one-off delete access to clean up a specific object. Learn more about Vercel Private Blob in the documentation. Read more