Signed URLs: self-service setup
Signed URLs are now available on all plans, including free, and can be configured directly from project settings.
- Every project now has a dedicated secure subdomain (
{subdomain}.s.ucarecd.net) that requires signed requests. - Signing secrets can be generated from Settings → Delivery → CDN domain names in the dashboard.
- Up to two signing secrets can be active at the same time to support key rotation.
- Projects using a legacy
ucarecdn.comdomain must disable it to fully close unsigned access. This action is irreversible. - Projects using custom CNAMEs are unaffected — existing setups continue to work without any changes.