Can I password protect shared files?

EasySend offers password protection on all uploads, including the free tier. When you add a password during upload, anyone who receives the share link must enter that password before they can view or download the files. This gives you control over who accesses your shared content.

How Password Protection Works

1. Upload your files to EasySend as usual by dragging and dropping them onto the page.
2. Enter a password in the password field before or during upload.
3. Share the link with your recipient.
4. The recipient enters the password on the download page. Without the correct password, the file list and download buttons are hidden.

Server-Side Password Hashing

The password you set is hashed using bcrypt before being stored. Bcrypt is a one-way hashing algorithm specifically designed for password storage. Even if the database were compromised, the actual passwords could not be recovered from the hashes. When a recipient enters a password, it is hashed and compared against the stored hash.

Password Protection vs Encryption

Password protection and encryption are two separate security features on EasySend:

• Password protection adds an access gate. The server verifies the password before showing the download page. The files themselves are stored in their original form on the server.
• End-to-end encryption encrypts the file data itself in your browser using AES-256-GCM. The server cannot read the file contents even with direct storage access.

For sensitive data like financial records, medical documents or legal files, we recommend enabling both features. Password protection controls who can access the download page. Encryption ensures that even with access, the data cannot be read without the decryption password.

Sharing Passwords Securely

Never send the password in the same message as the share link. If someone intercepts that message, they have everything they need to access your files. Instead, send the link through one channel (like email) and the password through a different channel (like a text message or phone call). This two-channel approach means an attacker would need to compromise both channels to access your files.

Password Tips

• Use at least 8 characters for basic protection, 12 or more for sensitive files.
• Include a mix of letters, numbers and symbols.
• Avoid common words, names or dates.
• Do not reuse passwords from other services.
• Consider using a passphrase like "correct horse battery staple" for something that is both strong and memorable.

Free Feature

Password protection is available on all uploads at no cost. You do not need a Premium plan or any paid upgrade to add passwords to your shared files. This applies to both the web interface and the API.