You send a client a link to a proposal. They forward it to a colleague, who forwards it on again. Three weeks later it's sitting in an inbox you've never heard of, and there's nothing you can do about it — because a plain link works for anyone who has it, forever.
A password-protected link fixes that in about thirty seconds.
What it actually does
Instead of going straight to the destination, the link shows a short password prompt first. Enter the right password and it forwards you on. Get it wrong and you go nowhere.
The destination URL is never revealed to someone who can't get past the prompt — which is the part that matters if the link itself gives away something sensitive, like a client's name in a folder path.
How to set one up
- Create a free account on Hide.link.
- Paste the URL you want to protect.
- Open the link's advanced options and turn on password protection.
- Set a password.
- Create the link, then share the link and the password through different channels — link by email, password by phone or a message. Sending both in the same email defeats the point entirely.
When it's genuinely useful
- Client proposals and quotes — pricing you'd rather competitors didn't see
- Early access — a launch page live but not public yet
- Internal documents shared with contractors or partners
- Paid content — a workshop recording only attendees should reach
- Event material — slides for people who actually turned up
- Anything you'd rather wasn't forwarded
Two other controls worth knowing
Expiry dates
Set a link to stop working on a chosen date. Perfect for time-limited offers, applications with a deadline, or a document that shouldn't outlive the project. It also quietly solves the problem of old links floating around indefinitely.
Click limits
Cap how many times a link can be used. Send a download to one person with a limit of one or two clicks, and forwarding it becomes pointless. Useful for licence keys, single-use downloads and limited offers.
Combine all three — password, expiry and click limit — and a link becomes genuinely controlled rather than merely private-ish.
Be honest about what this is and isn't
Password protection is access control, not encryption. It's the right tool for keeping a proposal out of casual circulation. It is not the right tool for medical records, financial data, passwords, or anything covered by a data-protection obligation. For those, use a system built for it — encrypted storage with proper identity-based permissions.
Anyone who has the password can still share it. What you've stopped is the accidental forward, the link that gets pasted into a group chat, and the URL that leaks in a screenshot. That's most real-world leaks, but it isn't all of them.
Doing it well
- Different channels for link and password. The single most important rule.
- Use a different password per recipient when it matters — then you know who leaked it.
- Don't reuse a real password. Ever. Make one up for the link.
- Set an expiry as well. A password that lives forever eventually gets shared.
- Check the analytics. Twelve clicks on a link you sent to one person tells you something useful.
- Tell them it's protected so the prompt doesn't look like a phishing page.
Why this sits with link security generally
Protecting a link is one half of the picture; the other is knowing that links you receive are safe. If you're thinking about link security at all, are short links safe? covers the other direction — how to check where an unfamiliar link goes before you click it.
Protect your next link
It takes about thirty seconds and saves the conversation that starts with "how did they get this?" Create a free Hide.link account and protect your first link today.
Related reading: Are short links safe? · How to secure your short links
