Guide

How to password-protect a file transfer

Add a transfer password, deliver it through a separate channel, and combine it with sensible expiry and download limits.

Try the real sender See how it works ↓

Working checklist0 / 5

Use this checklist here; the full reasoning stays below.

Guide01

What the password protects

It gates access to the transfer for someone holding the link. TransferSize derives the stored value with salted PBKDF2-SHA-256 rather than keeping it as readable text.

Guide02

What it does not protect

A transfer password is not client-side end-to-end encryption. A recipient who downloads the file can copy it, and a compromised recipient device remains outside the link control.

Guide03

Operational hygiene

Do not place the password in the same message as the link. Remove the transfer when the delivery is complete if it should no longer be available.

Edge cases

Before the handoff

Can support tell me the password?

The readable password is not stored for retrieval; use a controlled password manager on your side.

Is expiry a substitute for a password?

No. Expiry limits time; a password adds a separate access check.

Put the guide to work

Open the sender and follow the same sequence.

Start the transfer