# Open a link > Open a transfer link, a friendly token, or a vault's read key. Everything after the # stays in your browser; decryption happens here, and opening needs no account and no token. *Source: · send.sgit.ai v0.1.2 · this file is generated from the same content as the page, so the two cannot drift. Every page on this site has a `.md` twin; internal links below point at pages, swap `.html` for `.md` to read the twin.* --- # Open Everything that unlocks a file is after the `#` in the link, which your browser never sends to any server. Paste a link, a friendly token, or a read key; the file is decrypted here. A link, a token, or a key Open Nothing you paste here is uploaded. ## What this page can open Looks likeIt isWhat happens `#abc123def456/`43 charactersa transfer with its keydownloaded, decrypted here, saved with the name that was inside the ciphertext `#abc123def456`a transfer, link onlythis page asks for the key that travelled separately `#river-cloud-3847`a friendly tokenthe transfer id and the key are both derived from the token, here `#sgit_public_read_…:vaultid`a vault's read keyevery file and every version, read only, decrypted here; also `sgit clone`-able `#sgit_private_vault_…:vaultid`a vault keyopens too, with a warning: it is write access and should not have travelled in a link A link made on [send.sgraph.ai](https://send.sgraph.ai) opens here too, and the other way round: the formats are the same. [QR codes and friendly tokens](/learn/qr-codes/).