not encryption, DRM, or a promise that downloading is impossible<\/strong>.\nA determined viewer can inspect the browser flow, automate reconstruction, or\ncapture rendered content. Use it when raising the cost of casual downloading is\nvaluable; use established encryption and access control when confidentiality is\nrequired.<\/p>\n\nIncluded functionality<\/h4>\n\n
The plugin protects any number of image attachments. All image functionality\nshipped in this WordPress.org package is available without payment, a license,\na trial, or a usage quota.<\/p>\n\n
It includes public or logged-in-only access, Gutenberg image support,\nfeatured-image and srcset<\/code> handling, and backup\/recovery tools.<\/p>\n\nDelivery flow<\/h4>\n\n\n- WordPress stores each image as an incomplete BitSplit block, with reconstruction\ndata stored separately in attachment metadata.<\/li>\n
- Front-end image markup receives a placeholder instead of the original image URL.<\/li>\n
- The browser establishes an ephemeral P-256 ECDH session.<\/li>\n
- Reconstruction data is transported with HKDF and AES-256-GCM.<\/li>\n
- Block bytes require a short-lived, session-bound signed token.<\/li>\n
- The browser reconstructs the image into a temporary Blob URL.<\/li>\n<\/ol>\n\n
The transport encryption protects reconstruction data in transit; the BitSplit\nblock itself is not encrypted and contains most source bytes.<\/p>\n\n
Access modes<\/h4>\n\n\n- Public visitors<\/strong> - public images remain viewable; BitSplit adds download and\nscraping friction.<\/li>\n
- Logged-in users only<\/strong> - anonymous visitors cannot obtain reconstruction data\nor block bytes.<\/li>\n<\/ul>\n\n
WordPress coverage<\/h4>\n\n
BitSplit handles normal attachment images, Gutenberg Image and Gallery blocks,\nfeatured images, srcset<\/code>, classic content containing wp-image-ID<\/code>, and the\n [bitsplit id=\"123\"] shortcode.<\/p>\n\nStorage<\/h4>\n\n
Incomplete blocks are stored in a plugin-owned directory resolved through\n wp_upload_dir(), while reconstruction data stays in WordPress post metadata.\nThe plugin does not write web-server configuration files or require users to edit\nserver configuration.<\/p>\n\n
Requirements<\/h4>\n\n\n- PHP 7.4 or newer<\/li>\n
- GMP extension<\/li>\n
- OpenSSL with ECDH support<\/li>\n<\/ul>\n\n\n
\n- Upload the
bitsplit-media-delivery<\/code> folder to \/wp-content\/plugins\/<\/code>.<\/li>\n- Activate BitSplit Media Delivery<\/strong>.<\/li>\n
- Open Tools -> BitSplit<\/strong>.<\/li>\n
- Choose an access mode.<\/li>\n
- Enable split image delivery.<\/li>\n
- Export the recovery manifest and store it safely.<\/li>\n<\/ol>\n\n\n
\nDoes BitSplit make downloading impossible?<\/h3><\/dt>\nNo. Public content must reach the viewer's browser. BitSplit removes the simple\nready-file URL and makes downloaders reproduce the reconstruction protocol.<\/p><\/dd>\n
Is BitSplit encryption?<\/h3><\/dt>\nNo. The reconstruction-data transport uses standard cryptography, but the stored\nBitSplit block is an incomplete, unencrypted representation of the source.<\/p><\/dd>\n
Is any included functionality locked behind payment?<\/h3><\/dt>\nNo. Every feature and all executable code included in this WordPress.org package\nare available without payment, a license, a trial, or a quota.<\/p><\/dd>\n
What happens when I deactivate or delete the plugin?<\/h3><\/dt>\nThe plugin attempts to restore protected image attachments to their normal public\npaths before removing its metadata. Keep a current exported manifest and filesystem\nbackup before bulk operations.<\/p><\/dd>\n
Does it need Python?<\/h3><\/dt>\nNo. The codec is implemented in PHP with GMP and in browser JavaScript.<\/p><\/dd>\n\n<\/dl>\n\n\n
1.2.4<\/h4>\n\n\n- Make the directory package a self-contained image plugin with no locked functionality.<\/li>\n
- Move separately distributed media-type integrations out of the directory package.<\/li>\n
- Store images only as keyless blocks and do not write web-server configuration.<\/li>\n<\/ul>\n\n
1.2.3<\/h4>\n\n\n- Store images as keyless blocks and migrate records created by earlier versions.<\/li>\n<\/ul>\n\n
1.2.2<\/h4>\n\n\n- Improve activation and deactivation recovery.<\/li>\n<\/ul>\n\n
1.2.1<\/h4>\n\n\n- Preserve protected image settings during updates.<\/li>\n<\/ul>\n\n
1.2.0<\/h4>\n\n\n- Add unlimited image attachment protection.<\/li>\n<\/ul>\n\n
1.1.0<\/h4>\n\n\n- Add public and logged-in-only access policies.<\/li>\n
- Add short-lived session-bound tokens and same-origin checks.<\/li>\n
- Add Gutenberg Image\/Gallery, featured-image, classic-content, and srcset coverage.<\/li>\n
- Stream block creation for large image files.<\/li>\n<\/ul>\n\n
1.0.0<\/h4>\n\n\n- Initial image delivery prototype with ECDH key transport, browser reconstruction,\nand recovery manifests.<\/li>\n<\/ul>","raw_excerpt":"Add friction to direct image downloads, hotlinking, and generic scraping.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/343431","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=343431"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/frolpaxa"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=343431"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=343431"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=343431"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=343431"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=343431"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=343431"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}