Core Features

Email protection

Email protection lets you control exactly who can open a link. Instead of giving everyone access, only approved email addresses (or approved company domains) can get in.

How it works

  1. You turn on email protection for a link.
  2. You add allowed emails (or domain patterns like *@company.com).
  3. A visitor enters their email on the link page and requests access.
  4. If their email is allowed, they get an access email with a one-time button/link.
  5. After they click it, the link opens in that browser/device for about 1 hour.

Set it up

  1. Open your link in the dashboard and click Edit.
  2. Set protection mode to Email.
  3. Add your allowlist entries:
    • Single person: alex@company.com
    • Whole domain: *@company.com
  4. Save your changes.

Email protection and password protection are separate modes. A link can use one or the other, not both at the same time.

What visitors will see

When someone opens a protected link, they first see an email access form. They enter their email and click Request access.

For privacy, the confirmation message is always generic. It does not reveal whether that email is on your allowlist.

Important behavior to know

For your protection and security, and to prevent leaks and abuse, we apply strict restrictions on how access links work. That’s why access behaves the way it does — so you and your visitors stay protected and you can rely on the feature with confidence.

  • Access emails are short-lived (about 15 minutes to click the access link).
  • After successful verification, viewing access lasts about 1 hour in that browser/device.
  • Access links are one-time and tied to the device/browser that requested them.
  • If you change the allowlist or switch protection mode, existing access sessions are cleared and visitors may need to verify again.

Troubleshooting

No access email arrived

  • Check spam/junk/promotions folders.
  • Confirm the entered email matches your allowlist (or domain pattern).
  • Wait a minute and try again.

Request a new access email from the protected link page and use the newest email.

Opened on a different device/browser

Request and open the access email from the same device/browser where you want to view the link.

Too many attempts message

The system limits repeated requests to prevent abuse. Wait a few minutes and try again.

oEmbed and protected links

Protected links (password or email) are blocked on the public oEmbed endpoint by design. If you need oEmbed output, use an unprotected public link.