Sharing a cloud folder by link is wonderfully easy. You send one link, and anyone can open the files without signing in or asking for access. That same ease is also the risk: if the link is forwarded, posted in the wrong place, or guessed from a message thread, people you never intended can see your documents, photos, invoices, or client work.
A password on the shared link adds a simple lock. The link alone is no longer enough; the person also needs the password, which you can send separately. This guide explains how password protection works in Dropbox and other cloud services, how to set it, and how to share passwords safely.
Quick Answer
Open the folder’s sharing settings on your cloud service’s website, create or edit the shared link, and enable the password option in link settings, then set a strong password and save. In Dropbox, link passwords are available on paid plans. Send the password separately from the link, never in the same message.
Why a Password Matters for Shared Links
A shared link works like a key that anyone can copy. Email forwarding, group chats, and screenshots make links travel far beyond the first person you sent them to. A password means a copied link alone is useless without the second piece of information.
Passwords are especially important for folders containing ID documents, contracts, financial records, medical letters, exam material, unreleased business plans, or client files. They are also useful for temporary sharing, because you can change the password or turn the link off when the job is done, cutting off everyone at once.
Be clear about one limit: a link password is a sharing control, not full encryption. The provider still stores the files, and anyone who knows both the link and the password can open them. For highly sensitive material, encrypt files yourself before uploading, which is covered later in this guide.
How to Password Protect a Dropbox Folder Link
Dropbox lets you add passwords and expiry dates to shared links on paid plans such as Plus, Professional, and team plans. Free Basic accounts generally cannot set link passwords.
- Sign in to dropbox.com and find the folder you want to share.
- Hover over the folder and choose Share, then choose the option to copy or create a link.
- Open Link settings for that shared link.
- Find Who has access and set it to People with the password, if shown.
- Turn on the password option, type a strong password, and save the settings.
- Copy the link and test it in a private or incognito browser window. You should be asked for the password before seeing any files.
- Send the link to your recipient, and send the password through a different channel, such as a phone call or a separate messaging app.
While you are in link settings, set an expiry date if your plan offers it. A link that expires in seven or thirty days is far safer than one that stays live forever. You can read the current plan rules in the Dropbox Help guide to setting permissions for shared links.
Password Protect Links in Other Cloud Services
Menus differ, but the idea is the same across major providers.
Google Drive
Google Drive does not offer a password for shared links. Instead, share the folder with specific people by email and use the Restricted setting, so only those signed-in accounts can open it. For public material, a link is fine; for private files, named sharing is the safer Google approach.
Microsoft OneDrive
OneDrive allows a password on sharing links for many personal and work accounts. When creating a link, open link settings, choose Set password, enter it, and apply. You can also set an expiry date on supported plans. Microsoft explains the steps in its support guide to sharing OneDrive files and folders.
iCloud, Box, and others
Box supports passwords on shared links on paid tiers. iCloud Drive focuses on inviting specific people rather than link passwords. Whatever service you use, look for Link settings, check whether a password is a paid feature, and always test the link signed out before trusting it.
If your current free plan cannot password-protect links, our guide to protecting shared files with passwords and expiring links compares practical workarounds, including named sharing and encrypted archives.
Choosing a Strong Password for a Shared Link
The password should be easy for you to send accurately but hard for strangers to guess. Use a long phrase of unrelated words mixed with a number, such as four random words joined together. Avoid the folder name, your company name, birthdays, the word password, or anything written inside the shared documents themselves.
Use a different password for each client or project. That way, if one password leaks, your other folders stay protected, and you can change just one password without disturbing everyone else.
Share the Password Safely
- Separate the link and password: Send the link by email and the password by text message, call, or another app.
- Confirm the recipient first: Check you have the right email address and phone number before sending anything.
- Say what it is for: Tell the person which folder the password belongs to and when the link expires, so they are not confused later.
- Never post both publicly: A password written in the same social post or forum thread as the link gives no protection at all.
- Change it when people leave: When a project ends or a team member moves on, change the password or disable the link completely.
Common Mistakes to Avoid
- Never testing the link: Always open the link in a private window signed out of your account. Many people enable a setting on the wrong link and share an open one.
- Using one password everywhere: Reuse means one leak opens every folder you have ever shared.
- Leaving links alive forever: Old links are forgotten keys. Review shared links every few months and disable the ones you no longer need.
- Password-protecting the link but inviting everyone by email too: People added directly may bypass the link rules. Check both the link settings and the member list.
- Trusting a password for very sensitive files: For passports, legal disputes, or confidential business data, encrypt the files before uploading as an extra layer.
Conclusion
Password-protecting a shared folder link takes a minute and blocks the most common sharing accident: a link ending up in the wrong hands. Set the password in link settings, add an expiry date where you can, test the link while signed out, and send the password through a separate channel. Review old links regularly, change passwords when access needs change, and use named sharing or encryption when the contents are truly sensitive.
Frequently Asked Questions
Can I password protect a Dropbox link on a free account?
Generally no. Dropbox reserves shared link passwords and expiry dates for paid plans. On a free account, share the folder with specific people by email instead, or compress the files into an encrypted archive before uploading them.
What happens if someone has the link but not the password?
They will see a password prompt and cannot view or download the files without entering it correctly. Keep trying limits in mind though: never use a short or guessable password for important folders.
Should I send the password in the same email as the link?
No. If that email is forwarded or the mailbox is compromised, both pieces are exposed together. Send the password by a different method, such as a text message or phone call, so a single leak does not open the folder.
Can I change the password on a link I already shared?
Yes, in most services you can edit the link settings and set a new password. Everyone will need the new password afterwards. It is a quick way to cut off access without creating a new link or moving files.
Is a link password the same as encrypting my folder?
No. A password controls who can open the shared link, but the provider still stores readable files. Encryption scrambles the files themselves so only someone with your encryption key can read them, wherever the files are stored.


Leave a Reply