You cannot add a password to a URL itself – a link is just an address. What you can do is put a gate in front of it: the page behind the link asks for a password, or you send a different link that asks for one and then leads to the content. Which method works depends on where the content lives (your website, a cloud drive, a document) and on one question most guides skip: does the original address still work for someone who has it? This guide compares the options, step by step, with that limit spelled out for each.
Ways to password-protect a link
| Where the content is | Method | Does the original URL stay protected? |
|---|---|---|
| A WordPress page | Page settings → Visibility → Password protected | Yes – WordPress asks for the password on that URL |
| Squarespace or Wix page | Page settings → password (Wix: page permissions) | Yes, for that page |
| Any website you control | HTTP basic authentication (.htaccess / server config) or an access proxy such as Cloudflare Access | Yes – the server refuses the URL without login |
| A Dropbox file or folder | Share → link settings → password (paid plans, not Plus) | Yes, for that shared link |
| A OneDrive file | Share → link settings → set password (Microsoft 365 plans) | Yes, for that link |
| A Google Drive file | No link passwords – share with specific people instead | Access is by Google account, not password |
| Any document or page you can upload | Upload it to a document-sharing tool and send its link with a passcode | Yes – the content is only available through the protected link |
| Any URL you cannot change | A gateway link: a tool asks for the password, then shows or opens the URL | No – anyone who already has the original URL can open it directly |
Your own website: protect the page, not the link
- WordPress: edit the page → Visibility → "Password protected" → enter the password → Update. Visitors to that URL see a password form.
- Squarespace / Wix: open the page settings and set a page password (on Wix, set the page to "password holders").
- Any server: add HTTP basic authentication for the folder, or put the site behind an access proxy (Cloudflare Access can require a one-time code to a permitted e-mail).
This is the only approach that protects the original address, because the check happens where the content is served.
Files in a cloud drive
- Dropbox: on Standard, Advanced and older Professional/Business plans you can set a password, expiry and disable downloads on a shared link – not on Plus. Viewers who are not signed in appear only as "Guest" (Dropbox help).
- OneDrive: Microsoft 365 plans let you set a password and expiry on a sharing link.
- Google Drive: there are no link passwords; restrict the link to named people, who must sign in with a Google account.
More on cloud drives for confidential files: Dropbox and DocSend as a data room.
Documents: send a protected link instead of the file
For PDFs, decks and Office files the strongest option is not to send the file at all. Upload it to a document-sharing tool and send a link that asks for a passcode – or for the reader's e-mail with a one-time code – and lets you add an expiry date, a views limit, a watermark with the reader's e-mail and block downloads. You also see who opened it and which pages they read.
In HelpRange: upload the file → open the link settings → set a passcode, optionally require e-mail, expiry, views limit and watermark → copy the link. The passcode is on the share link, the file itself is never sent. Guides: restrict who can open a PDF, password-protect a PDF.
A URL you cannot change: gateway links and their limit
If the content is somewhere you do not control – a Notion page, a public video, a partner's portal – you can send a gateway link: a link that asks for a password (or the reader's e-mail) and then shows or opens the original address. Some URL shorteners and document-sharing tools offer this; HelpRange does it with Add link, so the same passcode, e-mail gate, expiry and view tracking apply.
Be clear about the limit: the gate protects the link you send, not the destination. Anyone who already has the original URL – or sees it after opening – can share it. Use a gateway link to control and track who you sent it to; to protect the content itself, make the destination private or upload the content.
Which method to use
- A page on your site → your site's page password or server authentication.
- A confidential document → upload it and send a protected link with passcode or e-mail verification.
- A cloud file → Dropbox/OneDrive link password on a plan that supports it; Google Drive → named people.
- Someone else's URL → a gateway link for control and tracking, knowing the original address is not secret.
FAQ
Can you put a password on a link?
Not on the address itself. You protect the page behind it (website page password, server login, cloud-drive link password) or send a different link that asks for a password before showing the content.
How do I password-protect a URL for free?
On your own site: WordPress page passwords or HTTP basic authentication are free. For a document: upload it to a tool with passcode links – in HelpRange passcodes are part of the paid plans (from $39/month per team) and of the free 3-day trial.
Can I password-protect a Google Drive link?
No. Google Drive has no link passwords; share with specific people, or upload the file to a tool that supports passcodes.
Is a password-protected link secure?
Only as secure as the gate: a page password protects the page; a gateway link protects only the link you sent, not the original address. For documents, add e-mail verification, expiry and a viewer watermark.