Password Protect a Link

How to password-protect a link

1. Copy the link you want to protect. Any web address works: a Google Drive or Dropbox file, a download link, a video, a Notion or Canva page, or a page on your own site.
2. Paste it on zip1.io and pick a password. Go to zip1.io, paste the address into the box, click Advanced Options, and type a password in the Password field. For example, Preview@2026.
3. Click Shorten and share. Copy the short link you get back and send it. Send the password a different way, such as a text, a phone call, or a separate chat.

The password needs at least 8 characters, including a letter, a number, and an @ or a ., and those two symbols can't sit side by side. If it doesn't fit, the form says so and no link is made.

That's all a password protected link needs. There's nothing to install and no account to open.

What your visitor sees

When someone opens your short link, they land on a small zip1.io page that says "This link needs a password", with one box and an Open link button. The page doesn't show where the link goes.

With the right password, they go straight on to your page or file. With the wrong one, they stay where they are and see "That password didn't work. Check with whoever sent the link." A line at the bottom explains that zip1.io didn't create the link, and lets them report it if it looks suspicious.

Good times to use one

• A preview for a client. A draft design, a video cut, or a test version of a website that shouldn't get passed around.
• A file for one person. A family photo album, a scanned document, or a contract to sign.
• Class or club materials. One link and one password you read out at the start of the session.
• An early look. A launch page or a sign-up form for the people on your list.
• A download link. Put a password on the download link itself, so only people you've told can start the download.

Add an end date or a click limit

The same Advanced Options panel has two more boxes, and you can use either one alongside a password:

• Expires at. The link stops working after the date and time you pick. Handy for "available until Friday".
• Max clicks. The link stops after that many opens. Set it to 1 and only the first person to unlock it gets through.

A click is only counted after the right password goes in. Link previews in chat apps and wrong guesses don't use one up. For more ideas, see one-time links and click-limited, self-destructing links.

How private is it?

• Your password. When you set a password, we store it scrambled, not as readable text, so we can't look it up for you if it's forgotten.
• Where the link goes. We keep the address your link points to on our server, because we need it to send visitors there. The password decides who gets sent on. It doesn't scramble the page or file itself, so this isn't end-to-end encryption.
• The original address. Anyone who already has the original Drive, Dropbox or website address can still open it without your password. Share the short link, not the original.
• Your choice of password. Pick one people can't guess from your name, the file name or the date.

For real secrets, such as other passwords or bank details, use a dedicated secret-sharing tool instead of a link.

Other ways to protect a link

Use your file host's own password. Some storage services can put a password on a share link themselves. Dropbox does on some plans, and we explain how to add one on the free plan. Google Drive has no password setting, but it can limit a file or folder to people you invite (more on Drive). If you already pay for a plan that includes it, the host's own setting protects the original address too.

Turn on your website's page password. If the page lives on your own site, your site builder may have a password setting. WordPress, for example, has a "Password protected" option on every post and page. It only covers pages on that site, not links to anywhere else.

Lock the file itself. For a document, you can save it with a password before you upload it. Many PDF editors and file-compression apps can do this. The file stays locked even if someone gets the original download address. The trade-off: you can't add an end date, and you can't see whether anyone opened it.

How zip1.io compares

Bitly, Short.io and Dub cells come from each company's pricing page (bitly.com/pages/pricing, short.io/pricing, dub.co/pricing/links), checked 6 Oct 2026. Password protection is not listed on Bitly's pricing page (checked 5 Oct 2026).

* Not listed on Dub's link pricing page (checked 6 Oct 2026).

FAQ

• What are the password rules?

  At least 8 characters, with a letter, a digit, and an @ or a . somewhere in it. The @ and . can't sit next to each other. Length alone is not enough: a long password with no digit, or with no @ or ., is turned down. Preview@2026 is an example that works.

• Does Bitly have password-protected links?

  Password protection is not listed on Bitly's pricing page (checked 5 Oct 2026). zip1.io includes it free, with no account.

• Can I change the password later?

  No. Once a link is made, its password can't be changed or removed. Make a new short link with the new password and share that one instead.

• What if someone forgets the password?

  Send it to them again. We can't look it up for you. If you've forgotten it yourself, make a new short link.

• Do chat-app previews unlock the link or use up clicks?

  No. When an app like Slack, WhatsApp or iMessage fetches a preview, it only sees the password page. It can't get past it, and it doesn't count as a click toward a Max clicks limit.

• Is it end-to-end encrypted?

  No. The password only controls who gets sent on; the address your link points to sits on our server so we can send people there. For real secrets, such as other passwords or bank details, use a dedicated secret-sharing tool.

• Does it cost anything?

  No. Password-protected links on zip1.io are free and need no account.

Related