Share a Credential by Secure Link
Send a password to someone outside your team with a link that expires, limits views, can carry its own password and can be revoked.
A share link lets someone outside your team see a credential once, or a set number of times, without a login.
Create a link
- Open the credential and click Share.
- Choose what to include: Username, Password, URL, Notes, Custom fields. Username, password and URL are ticked to start with. 2FA codes are never shared.
- Choose how long the link lasts: 1 hour, 4 hours, 24 hours, 3 days, 7 days or 30 days.
- Choose how many times it can be opened. One is the safest.
- Optionally set a link password.
- Optionally add recipients and a message.
- Click to create the link.
You need Manage access to the credential to share it.
Protect the link with a password
Turn on the link password and the vault suggests one. You can type your own, at least 6 characters.
The link password is never put in an email. Give it to the recipient another way, such as by phone or text. That way someone who gets hold of the email still cannot open the link.
After 5 wrong tries the link is destroyed.
Email it to several people
Add addresses under To, CC and BCC. Paste a list and each address is added. You can add a message of up to 2,000 characters.
Each person receives the link and your message. The secret itself is never in the email.
If you add no recipients, copy the link and send it yourself.
What the recipient sees
- A page showing when the link expires and how many times it can be opened.
- A password box, if you set one.
- A Reveal button.
Nothing is used up until they press Reveal. Chat and email apps that preview links cannot use up the link.
Once the link has been opened its last time, it stops working and what it held is erased.
Know when it is opened
Notify me when it is opened is on to start with. You get a notification each time the link is revealed.
See and revoke links
- For one credential: the Shares tab.
- For the whole vault: Shared links in the header.
Each link shows who it went to, how many times it has been opened, when and from where, and any wrong password tries. Click Revoke to switch one off, or Revoke all shown to switch off everything in the list. Revoking erases what the link held.
Moving a credential to the bin revokes its links.
Secure Send
Use Secure Send in the header to send a secret that is not in the vault, such as a temporary password you just set. It has the same expiry, view limit, password and recipient options. The secret is not kept as a credential.
If the recipient cannot open it
The page tells them why:
- This link was revoked. Someone switched it off.
- This link has been used. It was opened the allowed number of times.
- This link has expired.
In each case, share the credential again to make a new link.
Was this article helpful?