BitSplit Media Delivery

BitSplit changes how WordPress delivers public media. Instead of keeping a complete file at a stable public URL, it stores the original and generated sizes as incomplete blocks and reconstructs each file in the visitor's browser through a short-lived session. It is a media-protection layer for photography portfolios, publishers, member sites, and other WordPress sites where making direct downloads and bulk collection harder is valuable. Why use BitSplit?

• No stable ready-to-download media URL - public paths serve incomplete blocks rather than finished files.
• Images, video, and audio - every supported media type is handled by the same delivery flow.
• Normal WordPress workflow - use the Media Library, Gutenberg Image, Gallery, Video and Audio blocks, featured images, and responsive srcset markup as usual.
• Two access modes - keep media public while adding download friction, or require visitors to sign in before reconstruction.
• No external service - reconstruction runs on your WordPress site and in the visitor's browser, with no SaaS account, license key, quota, or payment.
• Backup and recovery tools - export a recovery manifest before site changes and restore attachment mappings when needed.

BitSplit is not encryption, DRM, or a promise that downloading is impossible. A determined viewer can inspect the browser flow, automate reconstruction, or capture rendered content. Use it when raising the cost of casual downloading is valuable; use established encryption and access control when confidentiality is required. Included functionality The plugin protects any number of image, video, and audio attachments. Every feature is free: there is no paid tier, license key, trial, add-on, or usage quota, and the plugin contacts no external service. It includes public or logged-in-only access, Gutenberg image, gallery, video and audio support, featured-image and srcset handling, and backup/recovery tools. Delivery flow

1. WordPress stores each file as an incomplete BitSplit block, with reconstruction data stored separately in attachment metadata.
2. Front-end markup receives a placeholder instead of the original media URL.
3. The browser establishes an ephemeral P-256 ECDH session.
4. Reconstruction data is transported with HKDF and AES-256-GCM.
5. Block bytes require a short-lived, session-bound signed token.
6. The browser reconstructs the file into a temporary Blob URL. Video and audio are streamed through a Service Worker so playback can seek.

The transport encryption protects reconstruction data in transit; the BitSplit block itself is not encrypted and contains most source bytes. Access modes

• Public visitors - public media remains viewable; BitSplit adds download and scraping friction.
• Logged-in users only - anonymous visitors cannot obtain reconstruction data or block bytes.

WordPress coverage BitSplit handles normal attachment images, Gutenberg Image, Gallery, Video and Audio blocks, featured images, srcset, classic content containing wp-image-ID, and the [bitsplit id="123"] shortcode. Storage Incomplete blocks are stored in a plugin-owned directory resolved through wp_upload_dir(), while reconstruction data stays in WordPress post metadata. The plugin does not write web-server configuration files or require users to edit server configuration. Requirements

• PHP 7.4 or newer
• GMP extension
• OpenSSL with ECDH support

1.3.0

• Make the plugin fully free: image, video, and audio delivery ship in one package.
• Remove the licensing runtime and the separate paid package.

1.2.4

• Make the directory package a self-contained image plugin with no locked functionality.
• Move separately distributed media-type integrations out of the directory package.
• Store images only as keyless blocks and do not write web-server configuration.

1.2.3

• Store images as keyless blocks and migrate records created by earlier versions.

1.2.2

• Improve activation and deactivation recovery.

1.2.1

• Preserve protected image settings during updates.

1.2.0

• Add unlimited image attachment protection.

1.1.0

• Add public and logged-in-only access policies.
• Add short-lived session-bound tokens and same-origin checks.
• Add Gutenberg Image/Gallery, featured-image, classic-content, and srcset coverage.
• Stream block creation for large image files.

1.0.0

• Initial image delivery prototype with ECDH key transport, browser reconstruction, and recovery manifests.