Password Protection Guide

Secure your shares with passwords. Only those who know the password can access files.

What is Password Protection?

Password protection adds an authentication layer before files can be accessed:

• Recipients must enter password to see files
• Password set by you (uploader)
• Can be shared separately from link
• Different from expiration security
• Can combine with other security features

How to Protect with Password

Password Best Practices

Strong Password Criteria

• Length: Minimum 8 characters (12+ better)
• Variety: Mix uppercase, lowercase, numbers, symbols
• Complexity: Avoid dictionary words, birthdays, sequential numbers
• Uniqueness: Don't reuse passwords across shares
• Randomness: Use password generator for best results

Strong Password Examples

Password Generation

Tools to generate strong passwords:

• LastPass Password Generator
• Bitwarden Password Generator
• 1Password Generator
• OpenSSL: openssl rand -base64 12
• Python: secrets.token_urlsafe(12)

Sharing Password Safely

How NOT to Share

• ❌ In same email as link
• ❌ In URL parameters
• ❌ In unencrypted messages
• ❌ In document with link
• ❌ Posted publicly anywhere

Safe Methods

• ✅ Separate email (send link first, password in follow-up)
• ✅ Phone call (verbal password)
• ✅ Encrypted messaging (Signal, WhatsApp)
• ✅ Password manager shared vault
• ✅ In-person (print or write it down)

Use Cases

Sensitive Documents

Protect contracts, medical records, financial documents:

• Share via email link
• Password shared verbally
• Creates two-factor security
• Prevents accidental access

Limited Distribution

Control who can access files:

• Send link to group (can't be guessed)
• Each user gets own link+password
• Revoke specific person's access easily
• Different passwords per person

Public Links with Restrictions

Share link publicly but restrict access:

• Post link on public page
• Password only in private documentation
• Prevents casual discovery
• Still requires effort to access

Password Management

Changing Password

• You can change password anytime
• Old password stops working immediately
• New password takes effect instantly
• Existing recipients must use new password
• Notify recipients of password change

Removing Password

• You can remove password protection
• Link becomes accessible without password
• Reduces security level
• Useful if recipients forgot password

Password Reset

If you forget password:

• Can't retrieve password (we don't store it)
• Remove password and set new one
• Notify recipients of new password
• Use password manager to prevent future issues

Security Considerations

Encryption Level

• Passwords use industry-standard encryption
• Stored securely on servers
• Checked against entered password
• Never transmitted in plain text

Brute Force Protection

• System limits login attempts
• Delays increase with failed attempts
• Account lockout after too many failures
• Prevents automated password guessing

Combine with Other Features

For maximum security, use with:

• Expiration Times - Files expire after set time
• One-Time Links - Link works once only
• Access Control - Limit who can download

Compliance & Regulations

Meets Requirements For:

• GDPR (protects personal data)
• HIPAA (healthcare information)
• FERPA (student records)
• Industry best practices

Troubleshooting

Recipient Forgot Password

• They can request password hint (if you set one)
• Contact you to request new password
• You can remove password and set new one
• Share new password securely

Repeatedly Wrong Password

• Check password carefully (case sensitive)
• Verify copy-paste didn't add spaces
• Ensure correct password was shared
• Wait after too many attempts

Next Steps

• Learn About Expiration Times
• One-Time Links for Maximum Security
• Security Basics