Password-Protected Shares

Protect sensitive shares with an optional password (6–128 characters). The password is stored as a bcrypt hash — we never keep the plain text.

When viewers open the link

They see a password prompt first. Wrong passwords return a generic error (no hint whether the share exists). After five failed attempts from the same IP within 15 minutes, verification is temporarily rate-limited.

Works with

• Share view pages (/s/...)
• Public gallery links (when enabled)
• Password-protected Rooms
• Real-time channels (subscription requires prior password success)