Images & embeds
Hotlinking Explained: What It Is and How to Hotlink Files
Hotlinking lets you display files directly on other websites without hosting them yourself. Here is how it works, why services block it, and how to use it responsibly.
Updated
What hotlinking means
Hotlinking, also known as direct linking, means embedding an asset on a webpage using a direct link to a file stored on an external server. Instead of uploading an image or file to your own web server, you point an HTML tag, Markdown link, or app embed directly to the target URL.
For example, when you place an image tag on your site with a source URL pointing to another domain, the visitor's browser downloads that image directly from the remote server. The remote server handles the request and supplies the raw file bytes, while your site displays the asset.
Why many hosts block hotlinks
Every time a browser requests an embedded file, the server that hosts it consumes network bandwidth. When another site hotlinks that file, the hosting provider pays the data transfer costs without receiving any web traffic or ad revenue.
To stop this, many web hosts and free storage platforms implement hotlink protection. They inspect incoming HTTP requests, specifically the Referer header. If the Referer header shows that the request originated from an unauthorized domain, the host blocks the connection. The server may return an HTTP 403 Forbidden error or swap the requested image with an error placeholder image. Traditional file sharing sites also block hotlinking because their business models require visitors to land on a webpage filled with advertisements and download timers.
Hotlinking etiquette for file owners
Hotlinking has a bad reputation when it is done without permission. Pulling an image URL from an independent blog, news site, or personal portfolio shifts your bandwidth consumption onto someone else. This practice is often referred to as bandwidth theft.
Responsible hotlinking requires two things: you must own or have rights to the file, and you must use a host that explicitly supports direct linking. If you need to embed files across message boards, documentation, or chat platforms, upload those assets to a service designed to serve raw bytes directly.
Hotlink a file with Yoink
Yoink is a free file host built to provide direct links. You can upload files in your browser at yoink.zip without creating an account. An optional Google sign-in is available, but it is not required for uploading or downloading.
Once you upload a file, you receive a direct public URL on files.yoink.zip. The URL serves raw file bytes with the correct content type. There is no intermediate landing page, no countdown timer, and no visual wrapper. Because GET and HEAD requests are open to all origins, these URLs work anywhere a direct file URL is accepted:
- HTML img and video tags
- Markdown files and README documents
- Forum BBCode
- Discord and chat application embeds
- External CSS stylesheets and scripts
Common image formats like JPG, PNG, GIF, and WebP render immediately. Uploaded files include an X-Robots-Tag: noindex header, which prevents search engine crawlers from indexing your links. The API enforces a 5 GiB per-file size ceiling check, and presigned browser upload sessions time out after 15 minutes.
When not to hotlink
Hotlinking is useful for simple sharing, but it is not suitable for every scenario.
First, do not hotlink files hosted on third-party servers without permission. Always host your own assets.
Second, do not use Yoink or any other free file host as a production content delivery network for high-traffic websites. Free hosting does not include uptime guarantees, global routing optimization, or high-availability service level agreements.
Third, keep local copies of every file you upload. Yoink does not offer a promised file lifetime, and there is no self-service remote deletion. The browser interface only remembers the last 5 uploads stored in local storage on that specific device. If you clear your browser data or switch devices, that history is gone. Additionally, every link is public. Anyone who has the URL can fetch the file, so private links and password protection do not exist.