Password protection for shared files

I am pleased to announce a new security enhancement for our file sharing feature: password protection. Starting today, you can secure your shared files with a custom password, adding an extra layer of security to your distributed code generator outputs.

When sharing sensitive data such as promotional codes, serial numbers, or voucher files, you want to ensure that only the intended recipients can access them. While our existing security measures - unique download tokens, expiration dates, and download limits - provide solid protection, password protection gives you complete control over who can open your shared files.

How password protection works

The new feature integrates seamlessly into the existing sharing workflow. When creating a share, you can now optionally set a password that recipients must enter before they can download the file. This password is not stored in plain text - we use secure hashing to verify it, ensuring that even we cannot retrieve your chosen password.

Recipients receive the same email notification with their download link, but when they click it, they will be prompted to enter the password you configured. Only after providing the correct password will the download begin. This means that even if someone intercepts the download link, they cannot access the file without knowing the password.

When to use password protection

Password protection is particularly useful in several scenarios:

• Highly sensitive data: When sharing license keys, activation codes, or confidential promotional campaigns, adding a password ensures only authorized individuals can access the content.
• Extra security layer: Even with download limits and expiration dates, a password adds another barrier against unauthorized access. It is an excellent defense-in-depth strategy.
• Compliance requirements: Some business scenarios require additional verification before data can be shared. Password protection helps meet those requirements.
• Shared email accounts: If you are sending to a shared inbox or distribution list, the password ensures that only those who know it can access the file, even if others see the email.

Best practices for password-protected shares

While adding a password significantly improves security, its effectiveness depends on how you manage it. Here are some recommendations:

• Communicate passwords separately: Do not send the password in the same email as the download link. Use a different communication channel - for example, send the link via email and share the password through a secure messaging app or phone call.
• Use strong passwords: Avoid simple passwords like "1234" or "password". Create a reasonably complex password that cannot be easily guessed. Since you will be sharing it with intended recipients, it does not need to be memorizable - a random string works well.
• Combine with other features: Password protection works best when combined with download limits and expiration dates. This limits both who can access the file and for how long.

Part of a comprehensive security approach

Password protection joins our existing suite of security features for file sharing. You can combine it with:

• Download limits - Restrict how many times each recipient can download
• Expiration dates - Automatically expire shares after a set period
• Download notifications - Get alerted when files are downloaded
• Instant revocation - Delete shares at any time to revoke access immediately

For a complete overview of the file sharing functionality, see the original File sharing feature announcement.

Getting started

Password protection is available immediately for all file shares. When you create a new share from your quick generator or collection exports, simply enter your desired password in the sharing form. Leave it empty if you prefer not to use password protection for that particular share.

The password field is entirely optional, so you can choose which shares need the extra security layer and which do not. This flexibility lets you balance convenience with security based on the sensitivity of each distribution.

I hope this new feature helps you share your generated codes with greater confidence. As always, I welcome your feedback on this and other features.