Vercel Private Blob Reaches General Availability

Vercel has launched Vercel Private Blob for general availability across all plans. Now you can securely store sensitive files—such as user-uploaded photos, invoices, and agent memory—and precisely control access permissions.

With this update, Private stores, Signed URLs, and OIDC authentication are moving out of beta to become generally available features. They use the same Blob API as the existing Public Blob, and you can easily use them by simply specifying the access: 'private' option when uploading.

The key security and feature updates are as follows:

• OIDC authentication: Functions running on Vercel authenticate using short-lived OIDC tokens that are valid within the project scope, without static tokens. Vercel CLI also supports this, enhancing security.
• Signed URLs: You can generate URLs with a specified operation (GET, PUT, HEAD, DELETE), path, and expiration time (up to 7 days). This allows you to grant clients temporary access without exposing store credentials.

These features are very useful when users download personal files via expiring links, when sharing objects with external services for a specific period, or when granting an AI agent one-time delete permission on a specific object.