diff --git a/.gitignore b/.gitignore
index bebea5f..6f5334e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -14,6 +14,10 @@ dist-ssr
 .env
 NOTES.md
 
+#server disk data
+backend/resources/profile-images/*
+
+
 # Editor directories and files
 .vscode/*
 !.vscode/extensions.json
diff --git a/backend/package-lock.json b/backend/package-lock.json
index 909d847..6d17e98 100644
--- a/backend/package-lock.json
+++ b/backend/package-lock.json
@@ -19,7 +19,9 @@
 				"jsonwebtoken": "^9.0.2",
 				"mongodb": "^6.7.0",
 				"morgan": "^1.10.0",
+				"multer": "^1.4.5-lts.1",
 				"nodemailer": "^6.9.14",
+				"sharp": "^0.33.4",
 				"simple-http-codes": "^2.0.0",
 				"uuid": "^10.0.0",
 				"zod": "^3.23.8"
@@ -34,7 +36,10 @@
 				"@types/express-session": "^1.18.0",
 				"@types/jsonwebtoken": "^9.0.6",
 				"@types/morgan": "^1.9.9",
+				"@types/multer": "^1.4.11",
 				"@types/nodemailer": "^6.4.15",
+				"@types/sharp": "^0.32.0",
+				"@types/uuid": "^10.0.0",
 				"bcrypt": "^5.1.1",
 				"eslint": "^8.57.0",
 				"eslint-config-prettier": "^9.1.0",
@@ -58,6 +63,15 @@
 				"node": ">=12"
 			}
 		},
+		"node_modules/@emnapi/runtime": {
+			"version": "1.2.0",
+			"resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.2.0.tgz",
+			"integrity": "sha512-bV21/9LQmcQeCPEg3BDFtvwL6cwiTMksYNWQQ4KOxCZikEGalWtenoZ0wCiukJINlGCIi2KXx01g4FoH/LxpzQ==",
+			"optional": true,
+			"dependencies": {
+				"tslib": "^2.4.0"
+			}
+		},
 		"node_modules/@eslint-community/eslint-utils": {
 			"version": "4.4.0",
 			"resolved": "https://registry.npmjs.org/@eslint-community/eslint-utils/-/eslint-utils-4.4.0.tgz",
@@ -210,6 +224,437 @@
 			"deprecated": "Use @eslint/object-schema instead",
 			"dev": true
 		},
+		"node_modules/@img/sharp-darwin-arm64": {
+			"version": "0.33.4",
+			"resolved": "https://registry.npmjs.org/@img/sharp-darwin-arm64/-/sharp-darwin-arm64-0.33.4.tgz",
+			"integrity": "sha512-p0suNqXufJs9t3RqLBO6vvrgr5OhgbWp76s5gTRvdmxmuv9E1rcaqGUsl3l4mKVmXPkTkTErXediAui4x+8PSA==",
+			"cpu": [
+				"arm64"
+			],
+			"optional": true,
+			"os": [
+				"darwin"
+			],
+			"engines": {
+				"glibc": ">=2.26",
+				"node": "^18.17.0 || ^20.3.0 || >=21.0.0",
+				"npm": ">=9.6.5",
+				"pnpm": ">=7.1.0",
+				"yarn": ">=3.2.0"
+			},
+			"funding": {
+				"url": "https://opencollective.com/libvips"
+			},
+			"optionalDependencies": {
+				"@img/sharp-libvips-darwin-arm64": "1.0.2"
+			}
+		},
+		"node_modules/@img/sharp-darwin-x64": {
+			"version": "0.33.4",
+			"resolved": "https://registry.npmjs.org/@img/sharp-darwin-x64/-/sharp-darwin-x64-0.33.4.tgz",
+			"integrity": "sha512-0l7yRObwtTi82Z6ebVI2PnHT8EB2NxBgpK2MiKJZJ7cz32R4lxd001ecMhzzsZig3Yv9oclvqqdV93jo9hy+Dw==",
+			"cpu": [
+				"x64"
+			],
+			"optional": true,
+			"os": [
+				"darwin"
+			],
+			"engines": {
+				"glibc": ">=2.26",
+				"node": "^18.17.0 || ^20.3.0 || >=21.0.0",
+				"npm": ">=9.6.5",
+				"pnpm": ">=7.1.0",
+				"yarn": ">=3.2.0"
+			},
+			"funding": {
+				"url": "https://opencollective.com/libvips"
+			},
+			"optionalDependencies": {
+				"@img/sharp-libvips-darwin-x64": "1.0.2"
+			}
+		},
+		"node_modules/@img/sharp-libvips-darwin-arm64": {
+			"version": "1.0.2",
+			"resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-arm64/-/sharp-libvips-darwin-arm64-1.0.2.tgz",
+			"integrity": "sha512-tcK/41Rq8IKlSaKRCCAuuY3lDJjQnYIW1UXU1kxcEKrfL8WR7N6+rzNoOxoQRJWTAECuKwgAHnPvqXGN8XfkHA==",
+			"cpu": [
+				"arm64"
+			],
+			"optional": true,
+			"os": [
+				"darwin"
+			],
+			"engines": {
+				"macos": ">=11",
+				"npm": ">=9.6.5",
+				"pnpm": ">=7.1.0",
+				"yarn": ">=3.2.0"
+			},
+			"funding": {
+				"url": "https://opencollective.com/libvips"
+			}
+		},
+		"node_modules/@img/sharp-libvips-darwin-x64": {
+			"version": "1.0.2",
+			"resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-x64/-/sharp-libvips-darwin-x64-1.0.2.tgz",
+			"integrity": "sha512-Ofw+7oaWa0HiiMiKWqqaZbaYV3/UGL2wAPeLuJTx+9cXpCRdvQhCLG0IH8YGwM0yGWGLpsF4Su9vM1o6aer+Fw==",
+			"cpu": [
+				"x64"
+			],
+			"optional": true,
+			"os": [
+				"darwin"
+			],
+			"engines": {
+				"macos": ">=10.13",
+				"npm": ">=9.6.5",
+				"pnpm": ">=7.1.0",
+				"yarn": ">=3.2.0"
+			},
+			"funding": {
+				"url": "https://opencollective.com/libvips"
+			}
+		},
+		"node_modules/@img/sharp-libvips-linux-arm": {
+			"version": "1.0.2",
+			"resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm/-/sharp-libvips-linux-arm-1.0.2.tgz",
+			"integrity": "sha512-iLWCvrKgeFoglQxdEwzu1eQV04o8YeYGFXtfWU26Zr2wWT3q3MTzC+QTCO3ZQfWd3doKHT4Pm2kRmLbupT+sZw==",
+			"cpu": [
+				"arm"
+			],
+			"optional": true,
+			"os": [
+				"linux"
+			],
+			"engines": {
+				"glibc": ">=2.28",
+				"npm": ">=9.6.5",
+				"pnpm": ">=7.1.0",
+				"yarn": ">=3.2.0"
+			},
+			"funding": {
+				"url": "https://opencollective.com/libvips"
+			}
+		},
+		"node_modules/@img/sharp-libvips-linux-arm64": {
+			"version": "1.0.2",
+			"resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm64/-/sharp-libvips-linux-arm64-1.0.2.tgz",
+			"integrity": "sha512-x7kCt3N00ofFmmkkdshwj3vGPCnmiDh7Gwnd4nUwZln2YjqPxV1NlTyZOvoDWdKQVDL911487HOueBvrpflagw==",
+			"cpu": [
+				"arm64"
+			],
+			"optional": true,
+			"os": [
+				"linux"
+			],
+			"engines": {
+				"glibc": ">=2.26",
+				"npm": ">=9.6.5",
+				"pnpm": ">=7.1.0",
+				"yarn": ">=3.2.0"
+			},
+			"funding": {
+				"url": "https://opencollective.com/libvips"
+			}
+		},
+		"node_modules/@img/sharp-libvips-linux-s390x": {
+			"version": "1.0.2",
+			"resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-s390x/-/sharp-libvips-linux-s390x-1.0.2.tgz",
+			"integrity": "sha512-cmhQ1J4qVhfmS6szYW7RT+gLJq9dH2i4maq+qyXayUSn9/3iY2ZeWpbAgSpSVbV2E1JUL2Gg7pwnYQ1h8rQIog==",
+			"cpu": [
+				"s390x"
+			],
+			"optional": true,
+			"os": [
+				"linux"
+			],
+			"engines": {
+				"glibc": ">=2.28",
+				"npm": ">=9.6.5",
+				"pnpm": ">=7.1.0",
+				"yarn": ">=3.2.0"
+			},
+			"funding": {
+				"url": "https://opencollective.com/libvips"
+			}
+		},
+		"node_modules/@img/sharp-libvips-linux-x64": {
+			"version": "1.0.2",
+			"resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-x64/-/sharp-libvips-linux-x64-1.0.2.tgz",
+			"integrity": "sha512-E441q4Qdb+7yuyiADVi5J+44x8ctlrqn8XgkDTwr4qPJzWkaHwD489iZ4nGDgcuya4iMN3ULV6NwbhRZJ9Z7SQ==",
+			"cpu": [
+				"x64"
+			],
+			"optional": true,
+			"os": [
+				"linux"
+			],
+			"engines": {
+				"glibc": ">=2.26",
+				"npm": ">=9.6.5",
+				"pnpm": ">=7.1.0",
+				"yarn": ">=3.2.0"
+			},
+			"funding": {
+				"url": "https://opencollective.com/libvips"
+			}
+		},
+		"node_modules/@img/sharp-libvips-linuxmusl-arm64": {
+			"version": "1.0.2",
+			"resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-arm64/-/sharp-libvips-linuxmusl-arm64-1.0.2.tgz",
+			"integrity": "sha512-3CAkndNpYUrlDqkCM5qhksfE+qSIREVpyoeHIU6jd48SJZViAmznoQQLAv4hVXF7xyUB9zf+G++e2v1ABjCbEQ==",
+			"cpu": [
+				"arm64"
+			],
+			"optional": true,
+			"os": [
+				"linux"
+			],
+			"engines": {
+				"musl": ">=1.2.2",
+				"npm": ">=9.6.5",
+				"pnpm": ">=7.1.0",
+				"yarn": ">=3.2.0"
+			},
+			"funding": {
+				"url": "https://opencollective.com/libvips"
+			}
+		},
+		"node_modules/@img/sharp-libvips-linuxmusl-x64": {
+			"version": "1.0.2",
+			"resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-x64/-/sharp-libvips-linuxmusl-x64-1.0.2.tgz",
+			"integrity": "sha512-VI94Q6khIHqHWNOh6LLdm9s2Ry4zdjWJwH56WoiJU7NTeDwyApdZZ8c+SADC8OH98KWNQXnE01UdJ9CSfZvwZw==",
+			"cpu": [
+				"x64"
+			],
+			"optional": true,
+			"os": [
+				"linux"
+			],
+			"engines": {
+				"musl": ">=1.2.2",
+				"npm": ">=9.6.5",
+				"pnpm": ">=7.1.0",
+				"yarn": ">=3.2.0"
+			},
+			"funding": {
+				"url": "https://opencollective.com/libvips"
+			}
+		},
+		"node_modules/@img/sharp-linux-arm": {
+			"version": "0.33.4",
+			"resolved": "https://registry.npmjs.org/@img/sharp-linux-arm/-/sharp-linux-arm-0.33.4.tgz",
+			"integrity": "sha512-RUgBD1c0+gCYZGCCe6mMdTiOFS0Zc/XrN0fYd6hISIKcDUbAW5NtSQW9g/powkrXYm6Vzwd6y+fqmExDuCdHNQ==",
+			"cpu": [
+				"arm"
+			],
+			"optional": true,
+			"os": [
+				"linux"
+			],
+			"engines": {
+				"glibc": ">=2.28",
+				"node": "^18.17.0 || ^20.3.0 || >=21.0.0",
+				"npm": ">=9.6.5",
+				"pnpm": ">=7.1.0",
+				"yarn": ">=3.2.0"
+			},
+			"funding": {
+				"url": "https://opencollective.com/libvips"
+			},
+			"optionalDependencies": {
+				"@img/sharp-libvips-linux-arm": "1.0.2"
+			}
+		},
+		"node_modules/@img/sharp-linux-arm64": {
+			"version": "0.33.4",
+			"resolved": "https://registry.npmjs.org/@img/sharp-linux-arm64/-/sharp-linux-arm64-0.33.4.tgz",
+			"integrity": "sha512-2800clwVg1ZQtxwSoTlHvtm9ObgAax7V6MTAB/hDT945Tfyy3hVkmiHpeLPCKYqYR1Gcmv1uDZ3a4OFwkdBL7Q==",
+			"cpu": [
+				"arm64"
+			],
+			"optional": true,
+			"os": [
+				"linux"
+			],
+			"engines": {
+				"glibc": ">=2.26",
+				"node": "^18.17.0 || ^20.3.0 || >=21.0.0",
+				"npm": ">=9.6.5",
+				"pnpm": ">=7.1.0",
+				"yarn": ">=3.2.0"
+			},
+			"funding": {
+				"url": "https://opencollective.com/libvips"
+			},
+			"optionalDependencies": {
+				"@img/sharp-libvips-linux-arm64": "1.0.2"
+			}
+		},
+		"node_modules/@img/sharp-linux-s390x": {
+			"version": "0.33.4",
+			"resolved": "https://registry.npmjs.org/@img/sharp-linux-s390x/-/sharp-linux-s390x-0.33.4.tgz",
+			"integrity": "sha512-h3RAL3siQoyzSoH36tUeS0PDmb5wINKGYzcLB5C6DIiAn2F3udeFAum+gj8IbA/82+8RGCTn7XW8WTFnqag4tQ==",
+			"cpu": [
+				"s390x"
+			],
+			"optional": true,
+			"os": [
+				"linux"
+			],
+			"engines": {
+				"glibc": ">=2.31",
+				"node": "^18.17.0 || ^20.3.0 || >=21.0.0",
+				"npm": ">=9.6.5",
+				"pnpm": ">=7.1.0",
+				"yarn": ">=3.2.0"
+			},
+			"funding": {
+				"url": "https://opencollective.com/libvips"
+			},
+			"optionalDependencies": {
+				"@img/sharp-libvips-linux-s390x": "1.0.2"
+			}
+		},
+		"node_modules/@img/sharp-linux-x64": {
+			"version": "0.33.4",
+			"resolved": "https://registry.npmjs.org/@img/sharp-linux-x64/-/sharp-linux-x64-0.33.4.tgz",
+			"integrity": "sha512-GoR++s0XW9DGVi8SUGQ/U4AeIzLdNjHka6jidVwapQ/JebGVQIpi52OdyxCNVRE++n1FCLzjDovJNozif7w/Aw==",
+			"cpu": [
+				"x64"
+			],
+			"optional": true,
+			"os": [
+				"linux"
+			],
+			"engines": {
+				"glibc": ">=2.26",
+				"node": "^18.17.0 || ^20.3.0 || >=21.0.0",
+				"npm": ">=9.6.5",
+				"pnpm": ">=7.1.0",
+				"yarn": ">=3.2.0"
+			},
+			"funding": {
+				"url": "https://opencollective.com/libvips"
+			},
+			"optionalDependencies": {
+				"@img/sharp-libvips-linux-x64": "1.0.2"
+			}
+		},
+		"node_modules/@img/sharp-linuxmusl-arm64": {
+			"version": "0.33.4",
+			"resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-arm64/-/sharp-linuxmusl-arm64-0.33.4.tgz",
+			"integrity": "sha512-nhr1yC3BlVrKDTl6cO12gTpXMl4ITBUZieehFvMntlCXFzH2bvKG76tBL2Y/OqhupZt81pR7R+Q5YhJxW0rGgQ==",
+			"cpu": [
+				"arm64"
+			],
+			"optional": true,
+			"os": [
+				"linux"
+			],
+			"engines": {
+				"musl": ">=1.2.2",
+				"node": "^18.17.0 || ^20.3.0 || >=21.0.0",
+				"npm": ">=9.6.5",
+				"pnpm": ">=7.1.0",
+				"yarn": ">=3.2.0"
+			},
+			"funding": {
+				"url": "https://opencollective.com/libvips"
+			},
+			"optionalDependencies": {
+				"@img/sharp-libvips-linuxmusl-arm64": "1.0.2"
+			}
+		},
+		"node_modules/@img/sharp-linuxmusl-x64": {
+			"version": "0.33.4",
+			"resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-x64/-/sharp-linuxmusl-x64-0.33.4.tgz",
+			"integrity": "sha512-uCPTku0zwqDmZEOi4ILyGdmW76tH7dm8kKlOIV1XC5cLyJ71ENAAqarOHQh0RLfpIpbV5KOpXzdU6XkJtS0daw==",
+			"cpu": [
+				"x64"
+			],
+			"optional": true,
+			"os": [
+				"linux"
+			],
+			"engines": {
+				"musl": ">=1.2.2",
+				"node": "^18.17.0 || ^20.3.0 || >=21.0.0",
+				"npm": ">=9.6.5",
+				"pnpm": ">=7.1.0",
+				"yarn": ">=3.2.0"
+			},
+			"funding": {
+				"url": "https://opencollective.com/libvips"
+			},
+			"optionalDependencies": {
+				"@img/sharp-libvips-linuxmusl-x64": "1.0.2"
+			}
+		},
+		"node_modules/@img/sharp-wasm32": {
+			"version": "0.33.4",
+			"resolved": "https://registry.npmjs.org/@img/sharp-wasm32/-/sharp-wasm32-0.33.4.tgz",
+			"integrity": "sha512-Bmmauh4sXUsUqkleQahpdNXKvo+wa1V9KhT2pDA4VJGKwnKMJXiSTGphn0gnJrlooda0QxCtXc6RX1XAU6hMnQ==",
+			"cpu": [
+				"wasm32"
+			],
+			"optional": true,
+			"dependencies": {
+				"@emnapi/runtime": "^1.1.1"
+			},
+			"engines": {
+				"node": "^18.17.0 || ^20.3.0 || >=21.0.0",
+				"npm": ">=9.6.5",
+				"pnpm": ">=7.1.0",
+				"yarn": ">=3.2.0"
+			},
+			"funding": {
+				"url": "https://opencollective.com/libvips"
+			}
+		},
+		"node_modules/@img/sharp-win32-ia32": {
+			"version": "0.33.4",
+			"resolved": "https://registry.npmjs.org/@img/sharp-win32-ia32/-/sharp-win32-ia32-0.33.4.tgz",
+			"integrity": "sha512-99SJ91XzUhYHbx7uhK3+9Lf7+LjwMGQZMDlO/E/YVJ7Nc3lyDFZPGhjwiYdctoH2BOzW9+TnfqcaMKt0jHLdqw==",
+			"cpu": [
+				"ia32"
+			],
+			"optional": true,
+			"os": [
+				"win32"
+			],
+			"engines": {
+				"node": "^18.17.0 || ^20.3.0 || >=21.0.0",
+				"npm": ">=9.6.5",
+				"pnpm": ">=7.1.0",
+				"yarn": ">=3.2.0"
+			},
+			"funding": {
+				"url": "https://opencollective.com/libvips"
+			}
+		},
+		"node_modules/@img/sharp-win32-x64": {
+			"version": "0.33.4",
+			"resolved": "https://registry.npmjs.org/@img/sharp-win32-x64/-/sharp-win32-x64-0.33.4.tgz",
+			"integrity": "sha512-3QLocdTRVIrFNye5YocZl+KKpYKP+fksi1QhmOArgx7GyhIbQp/WrJRu176jm8IxromS7RIkzMiMINVdBtC8Aw==",
+			"cpu": [
+				"x64"
+			],
+			"optional": true,
+			"os": [
+				"win32"
+			],
+			"engines": {
+				"node": "^18.17.0 || ^20.3.0 || >=21.0.0",
+				"npm": ">=9.6.5",
+				"pnpm": ">=7.1.0",
+				"yarn": ">=3.2.0"
+			},
+			"funding": {
+				"url": "https://opencollective.com/libvips"
+			}
+		},
 		"node_modules/@jridgewell/resolve-uri": {
 			"version": "3.1.2",
 			"resolved": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz",
@@ -464,6 +909,15 @@
 				"@types/node": "*"
 			}
 		},
+		"node_modules/@types/multer": {
+			"version": "1.4.11",
+			"resolved": "https://registry.npmjs.org/@types/multer/-/multer-1.4.11.tgz",
+			"integrity": "sha512-svK240gr6LVWvv3YGyhLlA+6LRRWA4mnGIU7RcNmgjBYFl6665wcXrRfxGp5tEPVHUNm5FMcmq7too9bxCwX/w==",
+			"dev": true,
+			"dependencies": {
+				"@types/express": "*"
+			}
+		},
 		"node_modules/@types/node": {
 			"version": "20.14.2",
 			"resolved": "https://registry.npmjs.org/@types/node/-/node-20.14.2.tgz",
@@ -515,6 +969,22 @@
 				"@types/send": "*"
 			}
 		},
+		"node_modules/@types/sharp": {
+			"version": "0.32.0",
+			"resolved": "https://registry.npmjs.org/@types/sharp/-/sharp-0.32.0.tgz",
+			"integrity": "sha512-OOi3kL+FZDnPhVzsfD37J88FNeZh6gQsGcLc95NbeURRGvmSjeXiDcyWzF2o3yh/gQAUn2uhh/e+CPCa5nwAxw==",
+			"deprecated": "This is a stub types definition. sharp provides its own type definitions, so you do not need this installed.",
+			"dev": true,
+			"dependencies": {
+				"sharp": "*"
+			}
+		},
+		"node_modules/@types/uuid": {
+			"version": "10.0.0",
+			"resolved": "https://registry.npmjs.org/@types/uuid/-/uuid-10.0.0.tgz",
+			"integrity": "sha512-7gqG38EyHgyP1S+7+xomFtL+ZNHcKv6DwNaCZmJmo1vgMugyF3TCnXVg4t1uk89mLNwnLtnY3TpOpCOyp1/xHQ==",
+			"dev": true
+		},
 		"node_modules/@types/webidl-conversions": {
 			"version": "7.0.3",
 			"resolved": "https://registry.npmjs.org/@types/webidl-conversions/-/webidl-conversions-7.0.3.tgz",
@@ -792,6 +1262,11 @@
 				"node": ">= 8"
 			}
 		},
+		"node_modules/append-field": {
+			"version": "1.0.0",
+			"resolved": "https://registry.npmjs.org/append-field/-/append-field-1.0.0.tgz",
+			"integrity": "sha512-klpgFSWLW1ZEs8svjfb7g4qWY0YS5imI82dTg+QahUvJ8YqAY0P10Uk8tTyh9ZGuYEZEMaeJYCF5BFuX552hsw=="
+		},
 		"node_modules/aproba": {
 			"version": "2.0.0",
 			"resolved": "https://registry.npmjs.org/aproba/-/aproba-2.0.0.tgz",
@@ -978,6 +1453,22 @@
 			"integrity": "sha512-zRpUiDwd/xk6ADqPMATG8vc9VPrkck7T07OIx0gnjmJAnHnTVXNQG3vfvWNuiZIkwu9KrKdA1iJKfsfTVxE6NA==",
 			"license": "BSD-3-Clause"
 		},
+		"node_modules/buffer-from": {
+			"version": "1.1.2",
+			"resolved": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.2.tgz",
+			"integrity": "sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ=="
+		},
+		"node_modules/busboy": {
+			"version": "1.6.0",
+			"resolved": "https://registry.npmjs.org/busboy/-/busboy-1.6.0.tgz",
+			"integrity": "sha512-8SFQbg/0hQ9xy3UNTB0YEnsNBbWfhf7RtnzpL7TkBiTBRfrQ9Fxcnz7VJsleJpyp6rVLvXiuORqjlHi5q+PYuA==",
+			"dependencies": {
+				"streamsearch": "^1.1.0"
+			},
+			"engines": {
+				"node": ">=10.16.0"
+			}
+		},
 		"node_modules/bytes": {
 			"version": "3.1.2",
 			"resolved": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz",
@@ -1083,11 +1574,22 @@
 				"node": ">=10"
 			}
 		},
+		"node_modules/color": {
+			"version": "4.2.3",
+			"resolved": "https://registry.npmjs.org/color/-/color-4.2.3.tgz",
+			"integrity": "sha512-1rXeuUUiGGrykh+CeBdu5Ie7OJwinCgQY0bc7GCRxy5xVHy+moaqkpL/jqQq0MtQOeYcrqEz4abc5f0KtU7W4A==",
+			"dependencies": {
+				"color-convert": "^2.0.1",
+				"color-string": "^1.9.0"
+			},
+			"engines": {
+				"node": ">=12.5.0"
+			}
+		},
 		"node_modules/color-convert": {
 			"version": "2.0.1",
 			"resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz",
 			"integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==",
-			"dev": true,
 			"dependencies": {
 				"color-name": "~1.1.4"
 			},
@@ -1098,8 +1600,16 @@
 		"node_modules/color-name": {
 			"version": "1.1.4",
 			"resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz",
-			"integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==",
-			"dev": true
+			"integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA=="
+		},
+		"node_modules/color-string": {
+			"version": "1.9.1",
+			"resolved": "https://registry.npmjs.org/color-string/-/color-string-1.9.1.tgz",
+			"integrity": "sha512-shrVawQFojnZv6xM40anx4CkoDP+fZsw/ZerEMsW/pyzsRbElpsL/DBVW7q3ExxwusdNXI3lXpuhEZkzs8p5Eg==",
+			"dependencies": {
+				"color-name": "^1.0.0",
+				"simple-swizzle": "^0.2.2"
+			}
 		},
 		"node_modules/color-support": {
 			"version": "1.1.3",
@@ -1116,6 +1626,47 @@
 			"integrity": "sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==",
 			"dev": true
 		},
+		"node_modules/concat-stream": {
+			"version": "1.6.2",
+			"resolved": "https://registry.npmjs.org/concat-stream/-/concat-stream-1.6.2.tgz",
+			"integrity": "sha512-27HBghJxjiZtIk3Ycvn/4kbJk/1uZuJFfuPEns6LaEvpvG1f0hTea8lilrouyo9mVc2GWdcEZ8OLoGmSADlrCw==",
+			"engines": [
+				"node >= 0.8"
+			],
+			"dependencies": {
+				"buffer-from": "^1.0.0",
+				"inherits": "^2.0.3",
+				"readable-stream": "^2.2.2",
+				"typedarray": "^0.0.6"
+			}
+		},
+		"node_modules/concat-stream/node_modules/readable-stream": {
+			"version": "2.3.8",
+			"resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.8.tgz",
+			"integrity": "sha512-8p0AUk4XODgIewSi0l8Epjs+EVnWiK7NoDIEGU0HhE7+ZyY8D1IMY7odu5lRrFXGg71L15KG8QrPmum45RTtdA==",
+			"dependencies": {
+				"core-util-is": "~1.0.0",
+				"inherits": "~2.0.3",
+				"isarray": "~1.0.0",
+				"process-nextick-args": "~2.0.0",
+				"safe-buffer": "~5.1.1",
+				"string_decoder": "~1.1.1",
+				"util-deprecate": "~1.0.1"
+			}
+		},
+		"node_modules/concat-stream/node_modules/safe-buffer": {
+			"version": "5.1.2",
+			"resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz",
+			"integrity": "sha512-Gd2UZBJDkXlY7GbJxfsE8/nvKkUEU1G38c1siN6QP6a9PT9MmHB8GnpscSmMJSoF8LOIrt8ud/wPtojys4G6+g=="
+		},
+		"node_modules/concat-stream/node_modules/string_decoder": {
+			"version": "1.1.1",
+			"resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz",
+			"integrity": "sha512-n/ShnvDi6FHbbVfviro+WojiFzv+s8MPMHBczVePfUpDJLwoLT0ht1l4YwBCbi8pJAveEEdnkHyPyTP/mzRfwg==",
+			"dependencies": {
+				"safe-buffer": "~5.1.0"
+			}
+		},
 		"node_modules/console-control-strings": {
 			"version": "1.1.0",
 			"resolved": "https://registry.npmjs.org/console-control-strings/-/console-control-strings-1.1.0.tgz",
@@ -1176,6 +1727,11 @@
 			"resolved": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz",
 			"integrity": "sha512-QADzlaHc8icV8I7vbaJXJwod9HWYp8uCqf1xa4OfNu1T7JVxQIrUgOWtHdNDtPiywmFbiS12VjotIXLrKM3orQ=="
 		},
+		"node_modules/core-util-is": {
+			"version": "1.0.3",
+			"resolved": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.3.tgz",
+			"integrity": "sha512-ZQBvi1DcpJ4GDqanjucZ2Hj3wEO5pZDS89BWbkcrvdxksJorwUDDZamX9ldFkp9aw2lmBDLgkObEA4DWNJ9FYQ=="
+		},
 		"node_modules/cors": {
 			"version": "2.8.5",
 			"resolved": "https://registry.npmjs.org/cors/-/cors-2.8.5.tgz",
@@ -1265,7 +1821,6 @@
 			"version": "2.0.3",
 			"resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.0.3.tgz",
 			"integrity": "sha512-bwy0MGW55bG41VqxxypOsdSdGqLwXPI/focwgTYCFMbdUiBAxLg9CFzG08sz2aqzknwiX7Hkl0bQENjg8iLByw==",
-			"dev": true,
 			"engines": {
 				"node": ">=8"
 			}
@@ -2369,6 +2924,11 @@
 				"node": ">= 0.10"
 			}
 		},
+		"node_modules/is-arrayish": {
+			"version": "0.3.2",
+			"resolved": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.3.2.tgz",
+			"integrity": "sha512-eVRqCvVlZbuw3GrM63ovNSNAeA1K16kaR/LRY/92w0zxQ5/1YzwblUX652i4Xs9RwAGjW9d9y6X88t8OaAJfWQ=="
+		},
 		"node_modules/is-binary-path": {
 			"version": "2.1.0",
 			"resolved": "https://registry.npmjs.org/is-binary-path/-/is-binary-path-2.1.0.tgz",
@@ -2440,6 +3000,11 @@
 				"url": "https://github.com/sponsors/sindresorhus"
 			}
 		},
+		"node_modules/isarray": {
+			"version": "1.0.0",
+			"resolved": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz",
+			"integrity": "sha512-VLghIWNM6ELQzo7zwmcg0NmTVyWKYjvIeM83yjp0wRDTmUnrM678fQbcKBo6n2CJEF0szoG//ytg+TKla89ALQ=="
+		},
 		"node_modules/isexe": {
 			"version": "2.0.0",
 			"resolved": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz",
@@ -2738,6 +3303,14 @@
 				"node": "*"
 			}
 		},
+		"node_modules/minimist": {
+			"version": "1.2.8",
+			"resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz",
+			"integrity": "sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==",
+			"funding": {
+				"url": "https://github.com/sponsors/ljharb"
+			}
+		},
 		"node_modules/minipass": {
 			"version": "5.0.0",
 			"resolved": "https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz",
@@ -2869,6 +3442,34 @@
 			"resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
 			"integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A=="
 		},
+		"node_modules/multer": {
+			"version": "1.4.5-lts.1",
+			"resolved": "https://registry.npmjs.org/multer/-/multer-1.4.5-lts.1.tgz",
+			"integrity": "sha512-ywPWvcDMeH+z9gQq5qYHCCy+ethsk4goepZ45GLD63fOu0YcNecQxi64nDs3qluZB+murG3/D4dJ7+dGctcCQQ==",
+			"dependencies": {
+				"append-field": "^1.0.0",
+				"busboy": "^1.0.0",
+				"concat-stream": "^1.5.2",
+				"mkdirp": "^0.5.4",
+				"object-assign": "^4.1.1",
+				"type-is": "^1.6.4",
+				"xtend": "^4.0.0"
+			},
+			"engines": {
+				"node": ">= 6.0.0"
+			}
+		},
+		"node_modules/multer/node_modules/mkdirp": {
+			"version": "0.5.6",
+			"resolved": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.6.tgz",
+			"integrity": "sha512-FP+p8RB8OWpF3YZBCrP5gtADmtXApB5AMLn+vdyA+PyxCjrCs00mjyUozssO33cwDeT3wNGdLxJ5M//YqtHAJw==",
+			"dependencies": {
+				"minimist": "^1.2.6"
+			},
+			"bin": {
+				"mkdirp": "bin/cmd.js"
+			}
+		},
 		"node_modules/natural-compare": {
 			"version": "1.4.0",
 			"resolved": "https://registry.npmjs.org/natural-compare/-/natural-compare-1.4.0.tgz",
@@ -3211,6 +3812,11 @@
 				"url": "https://github.com/prettier/prettier?sponsor=1"
 			}
 		},
+		"node_modules/process-nextick-args": {
+			"version": "2.0.1",
+			"resolved": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-2.0.1.tgz",
+			"integrity": "sha512-3ouUOpQhtgrbOa17J7+uxOTpITYWaGP7/AhoR3+A+/1e9skrzelGi/dXzEYyvbxubEF6Wn2ypscTKiKJFFn1ag=="
+		},
 		"node_modules/proxy-addr": {
 			"version": "2.0.7",
 			"resolved": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz",
@@ -3489,6 +4095,45 @@
 			"resolved": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz",
 			"integrity": "sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw=="
 		},
+		"node_modules/sharp": {
+			"version": "0.33.4",
+			"resolved": "https://registry.npmjs.org/sharp/-/sharp-0.33.4.tgz",
+			"integrity": "sha512-7i/dt5kGl7qR4gwPRD2biwD2/SvBn3O04J77XKFgL2OnZtQw+AG9wnuS/csmu80nPRHLYE9E41fyEiG8nhH6/Q==",
+			"hasInstallScript": true,
+			"dependencies": {
+				"color": "^4.2.3",
+				"detect-libc": "^2.0.3",
+				"semver": "^7.6.0"
+			},
+			"engines": {
+				"libvips": ">=8.15.2",
+				"node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+			},
+			"funding": {
+				"url": "https://opencollective.com/libvips"
+			},
+			"optionalDependencies": {
+				"@img/sharp-darwin-arm64": "0.33.4",
+				"@img/sharp-darwin-x64": "0.33.4",
+				"@img/sharp-libvips-darwin-arm64": "1.0.2",
+				"@img/sharp-libvips-darwin-x64": "1.0.2",
+				"@img/sharp-libvips-linux-arm": "1.0.2",
+				"@img/sharp-libvips-linux-arm64": "1.0.2",
+				"@img/sharp-libvips-linux-s390x": "1.0.2",
+				"@img/sharp-libvips-linux-x64": "1.0.2",
+				"@img/sharp-libvips-linuxmusl-arm64": "1.0.2",
+				"@img/sharp-libvips-linuxmusl-x64": "1.0.2",
+				"@img/sharp-linux-arm": "0.33.4",
+				"@img/sharp-linux-arm64": "0.33.4",
+				"@img/sharp-linux-s390x": "0.33.4",
+				"@img/sharp-linux-x64": "0.33.4",
+				"@img/sharp-linuxmusl-arm64": "0.33.4",
+				"@img/sharp-linuxmusl-x64": "0.33.4",
+				"@img/sharp-wasm32": "0.33.4",
+				"@img/sharp-win32-ia32": "0.33.4",
+				"@img/sharp-win32-x64": "0.33.4"
+			}
+		},
 		"node_modules/shebang-command": {
 			"version": "2.0.0",
 			"resolved": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz",
@@ -3538,6 +4183,14 @@
 			"resolved": "https://registry.npmjs.org/simple-http-codes/-/simple-http-codes-2.0.0.tgz",
 			"integrity": "sha512-7oWAcq/rgq+334jOpth+80AZxcGVjz6bnG+G0IW1512bij7enppUkFrmepkfl3Nco5BBkB0rtXWbXU0JUwUbww=="
 		},
+		"node_modules/simple-swizzle": {
+			"version": "0.2.2",
+			"resolved": "https://registry.npmjs.org/simple-swizzle/-/simple-swizzle-0.2.2.tgz",
+			"integrity": "sha512-JA//kQgZtbuY83m+xT+tXJkmJncGMTFT+C+g2h2R9uxkYIrE2yy9sgmcLhCnw57/WSD+Eh3J97FPEDFnbXnDUg==",
+			"dependencies": {
+				"is-arrayish": "^0.3.1"
+			}
+		},
 		"node_modules/simple-update-notifier": {
 			"version": "2.0.0",
 			"resolved": "https://registry.npmjs.org/simple-update-notifier/-/simple-update-notifier-2.0.0.tgz",
@@ -3575,6 +4228,14 @@
 				"node": ">= 0.8"
 			}
 		},
+		"node_modules/streamsearch": {
+			"version": "1.1.0",
+			"resolved": "https://registry.npmjs.org/streamsearch/-/streamsearch-1.1.0.tgz",
+			"integrity": "sha512-Mcc5wHehp9aXz1ax6bZUyY5afg9u2rv5cqQI3mRrYkGC8rW2hM02jWuwjtL++LS5qinSyhj2QfLyNsuc+VsExg==",
+			"engines": {
+				"node": ">=10.0.0"
+			}
+		},
 		"node_modules/string_decoder": {
 			"version": "1.3.0",
 			"resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz",
@@ -3752,6 +4413,12 @@
 				}
 			}
 		},
+		"node_modules/tslib": {
+			"version": "2.6.3",
+			"resolved": "https://registry.npmjs.org/tslib/-/tslib-2.6.3.tgz",
+			"integrity": "sha512-xNvxJEOUiWPGhUuUdQgAJPKOOJfGnIyKySOc09XkKsgdUV/3E2zvwZYdejjmRgPCgcym1juLH3226yA7sEFJKQ==",
+			"optional": true
+		},
 		"node_modules/type-check": {
 			"version": "0.4.0",
 			"resolved": "https://registry.npmjs.org/type-check/-/type-check-0.4.0.tgz",
@@ -3788,6 +4455,11 @@
 				"node": ">= 0.6"
 			}
 		},
+		"node_modules/typedarray": {
+			"version": "0.0.6",
+			"resolved": "https://registry.npmjs.org/typedarray/-/typedarray-0.0.6.tgz",
+			"integrity": "sha512-/aCDEGatGvZ2BIk+HmLf4ifCJFwvKFNb9/JeZPMulfgFracn9QFcAf5GO8B/mweUjSoblS5In0cWhqpfs/5PQA=="
+		},
 		"node_modules/typescript": {
 			"version": "5.4.5",
 			"resolved": "https://registry.npmjs.org/typescript/-/typescript-5.4.5.tgz",
@@ -4008,8 +4680,7 @@
 		"node_modules/util-deprecate": {
 			"version": "1.0.2",
 			"resolved": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz",
-			"integrity": "sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==",
-			"dev": true
+			"integrity": "sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw=="
 		},
 		"node_modules/utils-merge": {
 			"version": "1.0.1",
@@ -4104,6 +4775,14 @@
 			"integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==",
 			"dev": true
 		},
+		"node_modules/xtend": {
+			"version": "4.0.2",
+			"resolved": "https://registry.npmjs.org/xtend/-/xtend-4.0.2.tgz",
+			"integrity": "sha512-LKYU1iAXJXUgAXn9URjiu+MWhyUXHsvfp7mcuYm9dSUKK0/CjtrUwFAxD82/mCWbtLsGjFIad0wIsod4zrTAEQ==",
+			"engines": {
+				"node": ">=0.4"
+			}
+		},
 		"node_modules/yallist": {
 			"version": "4.0.0",
 			"resolved": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz",
diff --git a/backend/package.json b/backend/package.json
index 18ac786..ab0ec44 100644
--- a/backend/package.json
+++ b/backend/package.json
@@ -22,7 +22,9 @@
 		"jsonwebtoken": "^9.0.2",
 		"mongodb": "^6.7.0",
 		"morgan": "^1.10.0",
+		"multer": "^1.4.5-lts.1",
 		"nodemailer": "^6.9.14",
+		"sharp": "^0.33.4",
 		"simple-http-codes": "^2.0.0",
 		"uuid": "^10.0.0",
 		"zod": "^3.23.8"
@@ -37,7 +39,10 @@
 		"@types/express-session": "^1.18.0",
 		"@types/jsonwebtoken": "^9.0.6",
 		"@types/morgan": "^1.9.9",
+		"@types/multer": "^1.4.11",
 		"@types/nodemailer": "^6.4.15",
+		"@types/sharp": "^0.32.0",
+		"@types/uuid": "^10.0.0",
 		"bcrypt": "^5.1.1",
 		"eslint": "^8.57.0",
 		"eslint-config-prettier": "^9.1.0",
diff --git a/backend/src/routes/controllers/account/account.router.ts b/backend/src/routes/controllers/account/account.router.ts
index dc2a7a2..1dead1a 100644
--- a/backend/src/routes/controllers/account/account.router.ts
+++ b/backend/src/routes/controllers/account/account.router.ts
@@ -1,11 +1,12 @@
 import express from "express";
+import { UpdateProfileSchema } from "../../../../../shared/schemas/UpdateProfile.schema";
 import authMiddleware from "../../middleware/auth.middleware";
 import createBodyValidatorMiddleware from "../../middleware/createBodyValidator.middleware";
-import { UpdateProfileSchema } from "../../../../../shared/schemas/UpdateProfile.schema";
-import updateProfileController from "./updateProfile.controller";
-import deleteAccountController from "./deleteAccount.controller";
 import logoutController from "../auth/logout.controller";
-
+import deleteAccountController from "./deleteAccount.controller";
+import updateProfileImageMiddleware from "./updateProfileImage.middleware";
+import updateProfileController from "./updateProfile.controller";
+import multer from "multer";
 const router = express.Router();
 
 router.use(authMiddleware);
@@ -16,6 +17,8 @@ router.patch(
 	updateProfileController
 );
 
+router.put("/image", updateProfileImageMiddleware, updateProfileController);
+
 router.delete("/", deleteAccountController, logoutController);
 
 export default router;
diff --git a/backend/src/routes/controllers/account/updateProfileImage.middleware.ts b/backend/src/routes/controllers/account/updateProfileImage.middleware.ts
new file mode 100644
index 0000000..e9978d2
--- /dev/null
+++ b/backend/src/routes/controllers/account/updateProfileImage.middleware.ts
@@ -0,0 +1,45 @@
+import { NextFunction, Request, Response } from "express";
+import fs from "fs";
+import HTTPCodes from "simple-http-codes";
+import HttpError from "../../../../../shared/types/HttpError/HttpError.type";
+import sharp from "sharp";
+export default async function updateProfileImageMiddleware(
+	req: Request,
+	res: Response,
+	next: NextFunction
+) {
+	//save image to disk
+	try {
+		const resourceDir = "resources/profile-images/";
+		const path = `${resourceDir}${res.locals.email}.webp`;
+		//the file will always have the same name...so this flag prevents unnecessary calls to db
+		let alreadyDefined;
+
+		if (!fs.existsSync(resourceDir)) {
+			fs.mkdirSync("./" + resourceDir, { recursive: true });
+		} else {
+			alreadyDefined = fs.existsSync(path);
+		}
+
+		fs.writeFileSync("./" + path, res.locals.fileBuffer);
+
+		if (alreadyDefined) {
+			console.log("already created");
+
+			return res.status(HTTPCodes.Success.CREATED).end();
+		}
+
+		req.body = {
+			image: `${req.protocol}://${req.headers.host}/${path}`,
+		};
+		return next();
+	} catch (error) {
+		return next(
+			new HttpError(
+				HTTPCodes.ServerError.BAD_GATEWAY,
+				"Could not save file",
+				{ error, cause: "saving file to disk" }
+			)
+		);
+	}
+}
diff --git a/backend/src/routes/controllers/misc/media.controller.ts b/backend/src/routes/controllers/misc/media.controller.ts
new file mode 100644
index 0000000..64a9c48
--- /dev/null
+++ b/backend/src/routes/controllers/misc/media.controller.ts
@@ -0,0 +1,20 @@
+import { NextFunction, Request, Response, json } from "express";
+import HTTPCodes from "simple-http-codes";
+import HttpError from "../../../../../shared/types/HttpError/HttpError.type";
+
+export default function mediaController(
+	req: Request,
+	res: Response,
+	next: NextFunction
+) {
+	try {
+		const path = req.path;
+		return res.status(200).sendFile(path, { root: "./" });
+	} catch (error) {
+		next(
+			new HttpError(HTTPCodes.ClientError.NOT_FOUND, "Not Found", {
+				error,
+			})
+		);
+	}
+}
diff --git a/backend/src/routes/middleware/imageOwnerAuth.middleware.ts b/backend/src/routes/middleware/imageOwnerAuth.middleware.ts
new file mode 100644
index 0000000..401d926
--- /dev/null
+++ b/backend/src/routes/middleware/imageOwnerAuth.middleware.ts
@@ -0,0 +1,15 @@
+import { NextFunction, Request, Response } from "express";
+import HTTPCodes from "simple-http-codes";
+
+export default async function imageOwnerAuthMiddleware(
+	req: Request,
+	res: Response,
+	next: NextFunction
+) {
+	if (req.path !== `/resources/profile-images/${res.locals.email}.webp`) {
+		return res
+			.status(HTTPCodes.ClientError.FORBIDDEN)
+			.json({ data: "Unauthorized" });
+	}
+	next();
+}
diff --git a/backend/src/routes/middleware/singleImageParser.middleware.ts b/backend/src/routes/middleware/singleImageParser.middleware.ts
new file mode 100644
index 0000000..b27bb6d
--- /dev/null
+++ b/backend/src/routes/middleware/singleImageParser.middleware.ts
@@ -0,0 +1,59 @@
+import { NextFunction, Request, Response } from "express";
+import multer from "multer";
+import HTTPCodes from "simple-http-codes";
+import HttpError from "../../../../shared/types/HttpError/HttpError.type";
+import { generateUUID } from "../../utils/crypto";
+import sharp from "sharp";
+import fs from "fs";
+const upload = multer({
+	storage: multer.memoryStorage(),
+	limits: {
+		fileSize: 3 * 10 ** 6, //3mb
+		files: 1,
+	},
+});
+
+//upload.single("image")
+
+async function singleImageValidatorMiddleware(
+	req: Request,
+	res: Response,
+	next: NextFunction
+) {
+	const file = req.file;
+	if (!file) {
+		return next();
+	}
+	if (!file.mimetype.match(/jpeg|png|jpg/)) {
+		return next(
+			new HttpError(
+				HTTPCodes.ClientError.BAD_REQUEST,
+				"Unsupported Format"
+			)
+		);
+	}
+
+	//compress
+	try {
+		const compressedImg = await sharp(file.buffer)
+			.webp()
+			.resize(300, 300)
+			.toBuffer();
+		res.locals.fileBuffer = compressedImg;
+	} catch (error) {
+		next(
+			new HttpError(
+				HTTPCodes.ServerError.BAD_GATEWAY,
+				"Unable to parse image",
+				{ error }
+			)
+		);
+	}
+	next();
+}
+
+const singleImageParser = [
+	upload.single("image"),
+	singleImageValidatorMiddleware,
+];
+export default singleImageParser;
diff --git a/backend/src/routes/router.ts b/backend/src/routes/router.ts
index a66166c..b8dc71a 100644
--- a/backend/src/routes/router.ts
+++ b/backend/src/routes/router.ts
@@ -3,14 +3,23 @@ import express from "express";
 import authRouter from "./controllers/auth/auth.router";
 import shopRouter from "./controllers/shop/shop.router";
 import accountRouter from "./controllers/account/account.router";
-//
-const router = express.Router();
-//dev only
 import mailRouter from "../mail/mail.router";
+import mediaController from "./controllers/misc/media.controller";
+import authMiddleware from "./middleware/auth.middleware";
+import imageOwnerAuthMiddleware from "./middleware/imageOwnerAuth.middleware";
 //
+const router = express.Router();
 router.use(authRouter);
 router.use("/shop", shopRouter);
 router.use("/profile", accountRouter);
 router.use(mailRouter);
 
+//resource access
+router.get(
+	"/resources/profile-images/:resource",
+	authMiddleware,
+	imageOwnerAuthMiddleware,
+	mediaController
+);
+
 export default router;
diff --git a/backend/src/server.ts b/backend/src/server.ts
index 753fcf0..21ae831 100644
--- a/backend/src/server.ts
+++ b/backend/src/server.ts
@@ -7,20 +7,23 @@ import timeoutMiddleware from "./routes/middleware/timeout.middleware";
 import router from "./routes/router";
 import HttpError from "../../shared/types/HttpError/HttpError.type";
 import { inspect } from "node:util";
+import singleImageParser from "./routes/middleware/singleImageParser.middleware";
+import { MulterError } from "multer";
 
 const server = express();
 server.use(morgan("dev"));
+server.use(timeoutMiddleware(15000));
+server.disable("x-powered-by");
 server.use(
 	cors({
 		origin: "http://localhost:5173",
 		credentials: true,
 	})
 );
+
 server.use(cookieParser());
-server.disable("x-powered-by");
+server.use(singleImageParser);
 server.use(express.json());
-server.use(timeoutMiddleware(15000));
-
 //====== ROUTES
 
 server.get("/health", (_, res) => {
@@ -43,6 +46,23 @@ server.use(
 			});
 		}
 
+		if (error instanceof MulterError) {
+			console.error(inspect(error, { depth: null }));
+			if (error.code === "LIMIT_UNEXPECTED_FILE")
+				return res
+					.status(HTTPCodes.ClientError.BAD_REQUEST)
+					.json({ data: "Unsupported file" });
+			else if (error.code === "LIMIT_FILE_SIZE") {
+				return res
+					.status(HTTPCodes.ClientError.BAD_REQUEST)
+					.json({ data: "File too big" });
+			} else {
+				return res
+					.status(HTTPCodes.ClientError.BAD_REQUEST)
+					.json({ data: "Unsupported Request" });
+			}
+		}
+
 		console.error(error);
 
 		return res.status(500).json({
diff --git a/backend/src/utils/crypto.ts b/backend/src/utils/crypto.ts
index 4a3c016..73e746e 100644
--- a/backend/src/utils/crypto.ts
+++ b/backend/src/utils/crypto.ts
@@ -4,6 +4,7 @@ import jwt from "jsonwebtoken";
 import HttpError from "../../../shared/types/HttpError/HttpError.type";
 import HTTPCodes from "simple-http-codes";
 import { randomBytes } from "crypto";
+import { v4 } from "uuid";
 configDotenv();
 
 const JWT_SECRET = process.env.JWT_SECRET;
@@ -31,11 +32,8 @@ export async function verifyToken(token: string) {
 }
 
 export function generateRandomString(length: number = 256) {
-	randomBytes(length, (err, buf) => {
-		if (err) throw err;
-
-		const str = buf.toString("hex");
-		console.log(`${buf.length} bytes of random data: ${str}`);
-		return str;
-	});
+	return randomBytes(length).toString("hex");
+}
+export function generateUUID() {
+	return v4();
 }