BitSplit changes how WordPress delivers public media. Instead of keeping a\ncomplete file at a stable public URL, it stores the original and generated sizes\nas incomplete blocks and reconstructs each file in the visitor's browser through\na short-lived session.<\/p>\n\n
It is a media-protection layer for photography portfolios, publishers, member\nsites, and other WordPress sites where making direct downloads and bulk collection\nharder is valuable.<\/p>\n\n
srcset<\/code> markup as usual.<\/li>\n- Two access modes<\/strong> - keep media public while adding download friction, or\nrequire visitors to sign in before reconstruction.<\/li>\n
- No external service<\/strong> - reconstruction runs on your WordPress site and in the\nvisitor's browser, with no SaaS account, license key, quota, or payment.<\/li>\n
- Backup and recovery tools<\/strong> - export a recovery manifest before site changes\nand restore attachment mappings when needed.<\/li>\n<\/ul>\n\n
BitSplit is not encryption, DRM, or a promise that downloading is impossible<\/strong>.\nA determined viewer can inspect the browser flow, automate reconstruction, or\ncapture rendered content. Use it when raising the cost of casual downloading is\nvaluable; use established encryption and access control when confidentiality is\nrequired.<\/p>\n\nIncluded functionality<\/h4>\n\n
The plugin protects any number of image, video, and audio attachments.\nEvery feature is free: there is no paid tier, license key, trial, add-on, or\nusage quota, and the plugin contacts no external service.<\/p>\n\n
It includes public or logged-in-only access, Gutenberg image, gallery, video and\naudio support, featured-image and srcset<\/code> handling, and backup\/recovery tools.<\/p>\n\nDelivery flow<\/h4>\n\n\n- WordPress stores each file as an incomplete BitSplit block, with reconstruction\ndata stored separately in attachment metadata.<\/li>\n
- Front-end markup receives a placeholder instead of the original media URL.<\/li>\n
- The browser establishes an ephemeral P-256 ECDH session.<\/li>\n
- Reconstruction data is transported with HKDF and AES-256-GCM.<\/li>\n
- Block bytes require a short-lived, session-bound signed token.<\/li>\n
- The browser reconstructs the file into a temporary Blob URL. Video and audio\nare streamed through a Service Worker so playback can seek.<\/li>\n<\/ol>\n\n
The transport encryption protects reconstruction data in transit; the BitSplit\nblock itself is not encrypted and contains most source bytes.<\/p>\n\n
Access modes<\/h4>\n\n\n- Public visitors<\/strong> - public media remains viewable; BitSplit adds download and\nscraping friction.<\/li>\n
- Logged-in users only<\/strong> - anonymous visitors cannot obtain reconstruction data\nor block bytes.<\/li>\n<\/ul>\n\n
WordPress coverage<\/h4>\n\n
BitSplit handles normal attachment images, Gutenberg Image, Gallery, Video and\nAudio blocks, featured images, srcset<\/code>, classic content containing wp-image-ID<\/code>,\nand the [bitsplit id=\"123\"]<\/code> shortcode.<\/p>\n\nStorage<\/h4>\n\n
Incomplete blocks are stored in a plugin-owned directory resolved through\n wp_upload_dir(), while reconstruction data stays in WordPress post metadata.\nThe plugin does not write web-server configuration files or require users to edit\nserver configuration.<\/p>\n\n
Requirements<\/h4>\n\n\n- PHP 7.4 or newer<\/li>\n
- GMP extension<\/li>\n
- OpenSSL with ECDH support<\/li>\n<\/ul>\n\n\n
\n- Upload the
bitsplit-media-delivery<\/code> folder to \/wp-content\/plugins\/<\/code>.<\/li>\n- Activate BitSplit Media Delivery<\/strong>.<\/li>\n
- Open Tools -> BitSplit<\/strong>.<\/li>\n
- Choose an access mode.<\/li>\n
- Enable split media delivery.<\/li>\n
- Export the recovery manifest and store it safely.<\/li>\n<\/ol>\n\n\n
\nDoes BitSplit make downloading impossible?<\/h3><\/dt>\nNo. Public content must reach the viewer's browser. BitSplit removes the simple\nready-file URL and makes downloaders reproduce the reconstruction protocol.<\/p><\/dd>\n
Is BitSplit encryption?<\/h3><\/dt>\nNo. The reconstruction-data transport uses standard cryptography, but the stored\nBitSplit block is an incomplete, unencrypted representation of the source.<\/p><\/dd>\n
Is any functionality locked behind payment?<\/h3><\/dt>\nNo. The plugin is entirely free: every feature and all executable code ship in this\npackage, with no paid tier, license, trial, or quota.<\/p><\/dd>\n
What happens when I deactivate or delete the plugin?<\/h3><\/dt>\nThe plugin attempts to restore protected attachments to their normal public\npaths before removing its metadata. Keep a current exported manifest and filesystem\nbackup before bulk operations.<\/p><\/dd>\n
Does it need Python?<\/h3><\/dt>\nNo. The codec is implemented in PHP with GMP and in browser JavaScript.<\/p><\/dd>\n\n<\/dl>\n\n\n
1.3.0<\/h4>\n\n\n- Make the plugin fully free: image, video, and audio delivery ship in one package.<\/li>\n
- Remove the licensing runtime and the separate paid package.<\/li>\n<\/ul>\n\n
1.2.4<\/h4>\n\n\n- Make the directory package a self-contained image plugin with no locked functionality.<\/li>\n
- Move separately distributed media-type integrations out of the directory package.<\/li>\n
- Store images only as keyless blocks and do not write web-server configuration.<\/li>\n<\/ul>\n\n
1.2.3<\/h4>\n\n\n- Store images as keyless blocks and migrate records created by earlier versions.<\/li>\n<\/ul>\n\n
1.2.2<\/h4>\n\n\n- Improve activation and deactivation recovery.<\/li>\n<\/ul>\n\n
1.2.1<\/h4>\n\n\n- Preserve protected image settings during updates.<\/li>\n<\/ul>\n\n
1.2.0<\/h4>\n\n\n- Add unlimited image attachment protection.<\/li>\n<\/ul>\n\n
1.1.0<\/h4>\n\n\n- Add public and logged-in-only access policies.<\/li>\n
- Add short-lived session-bound tokens and same-origin checks.<\/li>\n
- Add Gutenberg Image\/Gallery, featured-image, classic-content, and srcset coverage.<\/li>\n
- Stream block creation for large image files.<\/li>\n<\/ul>\n\n
1.0.0<\/h4>\n\n\n- Initial image delivery prototype with ECDH key transport, browser reconstruction,\nand recovery manifests.<\/li>\n<\/ul>","raw_excerpt":"Replace ready-to-download media URLs with on-demand browser reconstruction to deter hotlinking and generic scraping.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/tir.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/343431","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tir.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/tir.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/tir.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=343431"}],"author":[{"embeddable":true,"href":"https:\/\/tir.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/frolpaxa"}],"wp:attachment":[{"href":"https:\/\/tir.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=343431"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/tir.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=343431"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/tir.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=343431"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/tir.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=343431"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/tir.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=343431"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/tir.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=343431"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}