Dropbox’s vendor demo shows an Anyone with this link can edit setting. Review or change that audience and role for the actual task; this example is not a recommended secure sharing state.
Before sending a Dropbox link, decide whether the recipient needs to edit a working folder or only view a release copy. Then review both folder membership and shared links. Link restrictions do not reduce permissions someone already has through a direct invitation or another access route.[1][2]
This guide uses the web interface for Dropbox files and folders. Team administration, mobile menus, Transfer, Replay and Sign have different controls. Password, expiration and download restrictions are plan-dependent; check the actual account before promising any of them. The vendor tutorial screenshot shows a sample Share dialog, not an ALLMSP customer account or a recommended public-edit setting.[2][3][6]
Choose the access route before choosing a button
| Task | Appropriate starting point | Permission to verify |
|---|---|---|
| Client reviews a final PDF | A view-only release file or restricted shared link | Correct audience; no unintended edit route through its parent folder. |
| A colleague maintains a working project | Named membership in the required folder | Can edit only where adding, changing and deleting content are intended. |
| Outside party needs a short review period | A supported restricted link with an explicit expiry, where available | Account entitlement, audience and actual expiration. |
| Collaboration ends | Review named members and both view/edit links | Remove the intended routes, then test again. |
Can view allows viewing and downloading, and generally commenting; it is not a promise that a recipient cannot keep a copy. Can edit includes adding, changing and deleting content in a shared folder. Keep drafts and internal notes outside a parent folder that a client can already access.[1]
For sensitive PDFs, prepare and verify a separate release copy before sharing. A restricted Dropbox link does not remove confidential text or hidden information from the document itself.
Inspect folder membership and inherited access
On dropbox.com, locate the folder, open its more-options menu, and choose Manage permissions. Review each member and the Can edit, Can view or Remove control. Confirm ownership and who is allowed to manage membership before making a change. Being able to edit the content does not always mean you may change every member’s access.[1]
Inspect the containing folder as well as the item you intend to share. Membership is normally inherited by subfolders. On Standard, Advanced, Business, Business Plus and Enterprise, Dropbox supports restricting subfolders inside a team folder by removing specific people or groups. That is a deliberate folder-permission change, not the effect of sending a different link.[1][7]
The restricted-subfolder feature applies only inside a team folder; Dropbox says a restricted folder cannot have a shared link. Team admins can still access team folders through the admin console even without ordinary membership. Verify the exact recipient’s access to the actual subfolder, and do not assume every shared-folder type supports this exception.[7]
Where you own the shared folder, its sharing settings can restrict who may add people. Record whether editors can manage invitations or only the owner can. For a team-owned workflow, have the administrator review the corresponding team policy rather than treating a personal-folder control as an organization-wide rule.[1][3]
Configure the actual link, not just a sharing default
Open Share for the exact file or folder and inspect the settings for the viewing or editing link you will send. Confirm Who has access and the allowed action. A copied address-bar URL is not a substitute for reviewing the shared link. Changing default sharing settings affects new links under the documented conditions; it does not repair every existing link.[1][2]
Dropbox currently documents passwords, expiration dates and disabled downloads for Professional, Essentials, Standard, Advanced, Business, Business Plus and Enterprise. Use the controls exposed by your account and policy. For a viewing link, the download restriction is in Link for viewing; it controls Dropbox’s download function, not screenshots or every other way someone could retain visible information.[2]
An expiration applies to that link, and the documented cutoff is 11:59 pm on the chosen day in your time zone. If access must end at a different contractual time, plan an owner action and verification rather than assuming the date picker expresses an arbitrary hour. Existing direct access remains a separate question.[2]
Team controls and existing access need separate review
| Control | Scope to verify | Common mistaken assumption |
|---|---|---|
| Approved people or domains | Who team members may invite to files and folders | It is not the same as restricting shared links, and does not remove existing access. |
| External link-sharing policy | Links created by the team’s members | An external collaborator with direct access can have different sharing routes. |
| Default link audience/action | Starting values for new links | A default is not a full audit of all existing links. |
| Folder link restrictions | Link access to the controlled folder and its contents | It is not the same as removing a named member. |
Certain admins on supported team plans can manage these policies in Admin console, under Dropbox Settings and External sharing. Review Who can be added to files and folders separately from link-sharing controls. The official policy documentation explicitly distinguishes these routes and notes that approved-list changes do not affect existing access.[3]
Test the recipient experience with a harmless sample
Use a non-sensitive sample in the intended release location. Test with an authorized recipient identity that has the same expected membership as the client. A private browsing window can help test an anyone-link, but it does not prove how a named user with inherited access behaves.
- Open the exact link that will be sent and confirm which account is signed in.
- Verify the intended file and folder contents are visible, with no adjacent internal material.
- Try the required action: preview, comment, download or edit, according to the agreed role.
- Where a password or expiration is required and supported, verify the restriction separately.
- Use a second authorized test identity that should be denied, and confirm the denial.
Example: a client only needs to review an approved PDF, but their email is already an editor on the project’s parent folder. Sending a new view-only link does not downgrade that membership. Resolve the existing edit route or choose a release location with the right access before treating the review as view-only.[1][2]
Revoke access through every route you intended to close
Remove the named member from the appropriate folder and review the option to leave them a copy. Separately delete or restrict obsolete viewing and editing links. Removing yourself from a visited link does not turn off the link for everybody; a still-active link can grant access again.[4][5]
Repeat the recipient test after the change. Record the account, item, membership route, link route and result. Do not promise to erase a copy already downloaded or copied outside Dropbox. If a whole shared folder must be unshared, assess the impact on every collaborator first; removing one recipient is a narrower operation.[4]
When the problem is an old local view, use Dropbox sync-state diagnosis. If a needed file was deleted or overwritten, use Dropbox recovery checks. For permanent removal of PDF content before release, follow Acrobat Pro redaction and hidden-information verification. Help with the application or permissions can start with Dropbox Support or Software Support.
Frequently asked questions
Does a view-only Dropbox link prevent downloads?
Will a link password restrict somebody already added to the folder?
No. Link settings apply to access through that link. A directly added member or somebody with another existing access route keeps those permissions.
[2]What can somebody with Can edit do in a shared Dropbox folder?
They can add, edit, download, share and delete files in that folder. Give edit access only when those actions are part of the intended collaboration.
[1]Can I hide one subfolder from a client who can access the parent folder?
A separate link does not hide it. Subfolders normally inherit access, but supported team plans can deliberately restrict a subfolder inside a team folder. Verify the recipient’s actual membership and access; restricted folders cannot have shared links, and team admins retain admin-console access.
[1][7]Which Dropbox plans support link passwords and expiration dates?
Dropbox documents these controls for Professional, Essentials, Standard, Advanced, Business, Business Plus and Enterprise. Availability also depends on the account’s policy and the specific sharing route.
[2]Will changing my sharing defaults fix old links?
No. The documented default-setting changes apply to new links under their stated conditions. Inspect existing links individually when reviewing old access.
[1]When does a Dropbox shared-link expiration take effect?
The documented expiration is 11:59 pm on the selected date in your time zone. Verify the actual setting and arrange a separate owner action when access must end at another time.
[2]Does a team’s approved email-domain list also restrict shared links?
No. Dropbox treats the list controlling who may be added separately from shared-link policy. Review both settings, and review existing access independently.
[3]Does removing my access disable a Dropbox link for everyone?
No. It removes the access associated with that action for your account. The link stays active until its owner or an authorized editor disables or changes it.
[5]How do I confirm a former collaborator can no longer open the files?
Sources
- Manage Dropbox file and folder permissions ↩
- Set Dropbox shared-link permissions ↩
- Manage external sharing for a Dropbox team ↩
- Remove folder members and delete Dropbox shared links ↩
- Understand removing your own shared-link access ↩
- Official Dropbox demonstration of sharing permissions ↩
- Restrict access to a subfolder inside a Dropbox team folder ↩
