Password Protect a Dropbox Link, Free

The catch with Dropbox's native feature

Dropbox does support shared-link passwords — that's not in dispute. The catch is which plans get it. Per Dropbox's own help docs, the feature is included on Professional, Essentials, Standard, Advanced, Business, Business Plus, and Enterprise. The free Basic plan and the individual Plus plan don't have it.

If you're on Basic and only need to protect the occasional shared link, paying $20/month for a feature you'll use twice a quarter is bad math. Wrapping the link is the right answer.

The workaround in three steps

curl -X POST http://zip1.io/api/create \
  -H "Content-Type: application/json" \
  -d '{
    "url": "https://www.dropbox.com/scl/fi/abc/contract.pdf?dl=0",
    "password": "client-2026"
  }'

What this actually protects against

• Casual forwarding — someone who only has the short URL can't reach the file.
• Search engine crawls — Dropbox URLs occasionally surface in caches; the short URL renders only the password page to crawlers.
• Slack / channel pasting — pasting the short link into a public channel doesn't leak file contents, only the existence of a password-gated resource.
• Embedded link previews — preview bots see the password page, not the file.

It does not protect against someone who has both the short URL and the password sharing them onward. For that case, layer on max-clicks: 1 (single redemption) so even a leaked pair can only be used once.

Bonus: free expiration too

Dropbox link expiration is also a paid feature. The wrapped short link adds it for free:

{
  "url": "https://www.dropbox.com/scl/fi/abc/q1-deck.pdf?dl=0",
  "password": "thursday-meeting",
  "expiration-time": "2026-04-30T17:00:00Z"
}

After the expiration timestamp, the short link stops working entirely — no password page, no redirect, just an expired-link page. The Dropbox file itself is unaffected; you can still access it from your own account.

Native Dropbox vs. wrapped short link

If you already pay for Dropbox Pro and need disable-downloads, use Dropbox's native feature. The wrapper is for free-plan users and for anyone who wants click caps or per-link analytics.

FAQ

• Does this work with Dropbox folders, not just files?

  Yes. The short link wraps any Dropbox URL, including folder share URLs.

• What happens if I revoke the Dropbox link?

  The short link still asks for the password, but the redirect lands on Dropbox's "this link is no longer active" page. Either re-share with a new Dropbox link (and mint a new short link to match) or leave it — the broken state is at least informative.

• Can the recipient screenshot the file once they're in?

  Yes — once they've passed the password and reached Dropbox, the file behaves exactly as it would for any "anyone with the link" share. Password protection isn't DRM. If you need view-only with no download, use Dropbox's native disable-downloads option (paid plans only).

• Is zip1.io free for this use?

  Yes. No signup, no monthly cap on links. The API is rate-limited at 10 link creations per minute per IP.

Related