Before opening an unexpected file
- Confirm the sender through a separate channel.
- Check the filename and size shown on the share page.
- Do not bypass operating-system malware warnings.
Integrity verification
Astral verifies the expected size and SHA-256 digest in the browser for supported download flows. A mismatch stops the normal save flow because the received bytes are not the finalized object Astral expected.
Protected files
A PIN, opening limit, or burn share uses a short-lived recipient lease. Complete the access step in the share page rather than trying to open the storage object directly.