Choose your controls
Decide who can open it, and for how long
Swipe across to see every column.
| Control | What it changes | What it does not do |
|---|---|---|
| Password | Requires the transfer password to open protected access. | Does not identify a person or encrypt the file end to end. |
| Expiry | Sets when access through the link ends. | Does not erase a copy already downloaded. |
| Download limit | Restricts successful downloads. | Does not create a list of approved people. |
Each setting does a different job
A password checks access. An expiry date limits time. A download limit controls repeat downloads.
Leave enough room for real people
Do not make the expiry or download limit so tight that a normal delay or second device blocks the recipient.
Limits should allow the intended work
A very tight download limit can make your own test or a recipient’s second device inconvenient. Use a setting that fits the audience, and review the transfer’s current state if access stops. It is not a substitute for individually verified recipients or a signed receipt.
- Share the linkSend the delivery address.
- Share the passwordUse a separate agreed channel.
- Allow timeLeave room for devices and retries.
Useful detail
Understand each access rule
Passwords are not stored as readable text
TransferSize uses PBKDF2-SHA-256 with a random salt and 210,000 rounds. Send the password in a different message from the link.
A password checks access, not identity
Anyone who has both the valid link and its password may be able to open it. The password does not prove they are your client. Send it separately from the link and never reuse your account password. The transfer password is not end-to-end file encryption.
Expiry is a deadline for the link
Choose an expiry that fits the recipient’s schedule and tell them what it is. An expiring public link and deletion of a stored owner copy are different events. For an important handoff, get confirmation before the deadline instead of assuming an expired temporary transfer can be recovered.
Download alerts help you follow up
An alert can draw your attention to transfer activity. It is not proof that a person read a PDF, approved a design, or checked every file. Ask for an explicit reply when a deadline or approval depends on it.
Questions
Questions people ask
Does the password encrypt the file?
No. It protects the download page. It is not end-to-end file encryption.
Can I count on an expired link coming back?
No. Choose the date before you share it.
Try TransferSize
Choose files →Send a file without entering a card.