Password Protection

Password protection is a security measure that requires readers to enter a correct password before they can view a digital publication. The content remains hidden behind a credential prompt — no pages, images, or text load until the password is verified. It is one of the most straightforward ways to restrict access to sensitive, confidential, or exclusive materials shared via a link. Unlike account-based authentication, password protection does not require readers to create accounts or log in to a platform, making it simple for both publishers and recipients.

Not all content is meant for public consumption. Confidential reports, internal training manuals, client deliverables, pre-launch materials, and premium publications all need controlled access. Password protection prevents unauthorized viewing, reduces the risk of content leaks, and lets publishers share a single link while still controlling who can read it. For industries with compliance requirements — legal, financial, healthcare — password protection serves as a baseline access control that can be documented and audited.

FlipLink's [password protection](/features/password-protection) feature lets you set a password on any flipbook or document with a single toggle. When a reader opens the publication link, they see a branded prompt asking for the password before any content loads. You can change or remove the password at any time without generating a new link. Password protection works alongside other access controls like [link expiry](/features/link-expiry) and [privacy settings](/features/privacy-and-access-control) for layered security. The password is stored securely using one-way hashing, meaning even FlipLink's servers cannot reverse it.

Password protection fits specific scenarios better than others: - **Client deliverables** — share a strategy deck, financial model, or audit report with a single client without worrying about the link being forwarded to the wrong person. - **Internal documents** — distribute HR policies, training guides, or board presentations to employees with a shared password. - **Pre-launch content** — let reviewers access a product catalog or campaign creative before it goes public. - **Gated premium content** — offer exclusive guides or research reports to paying subscribers by sending the password after purchase. - **Event-specific materials** — share conference agendas or workshop handouts only with registered attendees. For publications that require individual recipient verification rather than a shared password, consider combining password protection with [OTP (one-time password)](/glossary/otp) verification or an [email allowlist](/glossary/email-allowlist).

1. Open your flipbook or document in the FlipLink dashboard. 2. Navigate to the security or privacy settings panel. 3. Toggle password protection on. 4. Enter a strong password — avoid dictionary words and include a mix of characters. 5. Save the settings. The existing share link now requires the password. 6. Send the password to recipients through a separate channel (not in the same message as the link). 7. Optionally, enable [link expiry](/features/link-expiry) to add a time limit on access. 8. Test by opening the link in an incognito browser window to confirm the password prompt appears.

- **Separate channels for link and password.** Sending the link via email and the password via a messaging app or phone call reduces the risk of both being intercepted together. - **Rotate passwords periodically.** For ongoing publications like monthly reports, change the password with each edition to prevent stale access. - **Combine with other controls.** Password protection is stronger when paired with [link expiry](/features/link-expiry), [download restrictions](/glossary/download-restriction), or [IP restrictions](/glossary/ip-restriction). Layered security reduces the impact of any single control being bypassed. - **Track access attempts.** FlipLink's analytics show when a publication was accessed, helping you identify unusual patterns like access from unexpected locations. - **Consider audience size.** A shared password works well for small, trusted groups. For larger audiences where the password is likely to spread, [OTP verification](/glossary/otp) offers per-recipient control.