Public and unlisted
Public links are open through their configured URL. Unlisted links are intended for people who have the link and are not a substitute for private workspace access.
Choose how each link can be used
Security and access controls for hosted files
Access settings are attached to the file link, not hidden in a generic promise about privacy. From the dashboard, the uploader can choose the available visibility, expiry, password, preview, download and link-status controls for the current workspace.
The workflow
How a link’s access state is applied
The useful detail is what changes after the upload or selection. Follow the steps to see where the file, link and recipient fit together.
- 1
Choose the link mode
Set a file to Public, Unlisted, Private or Password protected when those controls are enabled for the account. Unlisted means the recipient needs the link; it is not the same as private workspace access.
- 2
Add a boundary
Set a valid-until date, maximum downloads, one-time view or signed-delivery duration where the dashboard offers it. The page shows disabled controls when a plan does not include them.
- 3
Choose what the recipient sees
For a share page, the owner can control preview, filename, file details and download-button visibility. Delivery mode can be inline, preview-only or force-download where supported.
- 4
Change or disable the link
Return to the asset record to update access settings or disable the link. The recipient then receives the current unavailable, password or access response instead of the previous state.
Product detail
Different controls solve different access problems
A useful access setting is the one that matches the recipient workflow. Time limits, identity requirements and download behavior should not be described as the same feature.
Private and password
Private links use workspace access rules, while password links ask the visitor for the configured password. Both can be plan-dependent.
Preview and download
The owner can choose inline delivery, preview-only or force-download where available, and can enable or disable downloads or set a maximum count.
Expiry and one-time access
A date, view limit or one-time setting can stop a link after its threshold where enabled. The original asset’s library record is managed separately from the link state.
Practical use
Match the control to the situation
Client approval
Use a share page with a password or expiry for a draft that needs review, then disable the link when the approval cycle is complete.
Website delivery
Use a direct URL when a page needs the file itself, and manage hotlink, download or access settings from the asset record instead of assuming the URL is private.
Before you rely on it
Security wording that stays accurate
- These controls reduce or shape access; they do not prevent a permitted recipient from sharing content.
- This page is not a promise of full malware scanning, website-wide embed monitoring or detailed failure alerts.
- Some controls are disabled on free accounts or depend on the asset and workspace role. Use the controls shown by the dashboard.
- A disabled or expired link does not by itself explain what happens to the original library asset; manage deletion separately.
Questions about this workflow
Frequently asked questions
No. Unlisted means the link is not intended for discovery and the recipient needs the URL. Private access uses workspace authorization and is a different setting.
The dashboard can expose an allow-downloads switch, preview-only delivery or a maximum-download setting depending on the workspace and plan.
Yes. An authorized owner can disable the active link from the asset access settings. The file’s library record remains a separate management object.
Password and access rules are enforced by the link delivery path where supported. The controls shown for the asset are the reliable guide for which output paths are protected.
Continue the workflow
Use a related page when the next step needs a different file type, workspace control or sharing mode.
Product controls and plan availability can change. The active dashboard remains the source of truth for your account.