Vercel Private Blob is now generally available for all plans. Store sensitive files like user-uploaded photos, invoices, and agent memory, and control exactly who can read them. Private stores, Signed URLs, and OIDC authentication all graduate from beta with this release.

Vercel Private Blob uses the same Blob API as public blobs. Specify access: 'private' when uploading a blob:

import { put } from '@vercel/blob' ;

await put ( 'invoices/2026-q1.pdf' , file , {

access : 'private' ,

} ) ;

Copy link to heading OIDC authentication

Functions running on Vercel now authenticate to Vercel Private Blob with a short-lived, auto-rotating OIDC token scoped to the project, with no static read-write token in your environment.

The Vercel CLI also supports OIDC authentication, so you can read from and write to a private store from your terminal without a long-lived token.…