How to Password-Protect a Link Before Sharing It Publicly

You’ve got a file, a doc, or a page you need to share — but you don’t want just anyone who stumbles across the link to access it. Maybe it’s a client proposal, an early product demo, or a private download. Whatever the reason, slapping a password on a link before you send it out is one of those simple security moves that most people don’t know how to do. Let me show you exactly how it’s done.

What You’ll Need

The right method depends on what you’re sharing. A Google Doc, a PDF download, a webpage, and a custom form all have different solutions. I’ll cover the four most common scenarios — pick the one that fits your situation.

Method 1: Password-Protect a Shared Notion Page

If you’re sharing content through Notion, the cleanest option is to publish the page and then protect it with a tool called Super.so or use Notion’s own audience controls. Notion itself doesn’t natively support password gates on free plans, but here’s the workaround I use most often.

Step 1: Publish Your Notion Page

1. Open the Notion page you want to share.
2. Click Share in the top-right corner of the page.
3. Toggle “Publish to web” to ON.
4. Copy the generated public link — it looks like notion.so/your-page-slug.

Step 2: Add a Password Gate via Passnoti or Super

Head to passnoti.com (free tool, no account needed for basic use). Paste your Notion URL into the field, set a password, and click “Create Protected Link.” You’ll get a new URL — that’s the one you share. When someone opens it, they see a password prompt before Notion loads.

Method 2: Restrict a Google Drive Link (The Right Way)

Here’s something that trips up a lot of people: Google Drive doesn’t have a password field on shared links. What it does have is a very effective access restriction system. The trick is to share with specific people rather than “Anyone with the link.”

1. Right-click the file in Google Drive and choose Share.
2. In the “Add people and groups” field, type the email addresses of people you want to grant access.
3. Set their permission to Viewer, Commenter, or Editor depending on your needs.
4. Click Send. They’ll get an email with the link, and only they can open it after signing in.
5. Make sure the general access at the bottom is set to “Restricted” — not “Anyone with the link.”

If your recipient doesn’t have a Google account, this method won’t work neatly. In that case, jump to Method 3.

Method 3: Use a Dedicated Link-Lock Tool

This is honestly the most flexible method — and my personal go-to when I need to gate any URL (not just a Notion page or Google Doc). Tools like T.LY, Rebrandly, or T2M let you wrap a password prompt around almost any URL.

Using T.LY (Free Tier Available)

1. Go to t.ly and create a free account.
2. Click “Create New Link” in your dashboard.
3. Paste the destination URL in the “Destination URL” field.
4. In the “Link Security” section, enable “Password Protection” and enter your chosen password.
5. Optionally set an expiry date under “Link Expiration” — handy for time-sensitive files.
6. Click “Create Link.” You’ll get a short link like t.ly/abc12 — share this instead of the original URL.

When a visitor clicks your link, they land on a branded password page. Enter the correct password, and they’re redirected to the real destination instantly.

Method 4: Password-Protect a WordPress Page or Post

If you’re running a WordPress site and want to publish something that only select visitors can see, WordPress has this built right in — no plugin required. I use this for client staging pages all the time.

1. In the WordPress block editor, open the page or post you want to protect.
2. In the right-hand panel, find the Status & Visibility section (at the top of the panel).
3. Next to “Visibility,” click where it says Public.
4. A dropdown appears. Select “Password Protected.”
5. Type a password into the “Use a Password” field that appears below.
6. Click Publish (or Update if the page already exists).

Anyone who visits the URL now sees a simple “This content is password protected” message with an input field. They type the password and the full page loads. The password persists in their browser cookie for about 10 days, so they won’t be asked again on the same device.

Pro Tips & Common Mistakes to Avoid

Wrapping Up

Password-protecting a link doesn’t have to be complicated. Whether you’re gating a Notion page, locking down a Google Doc, or wrapping any URL in a password prompt, there’s a simple tool for the job. The key is matching the method to the content — don’t over-engineer it, but don’t under-protect it either.

Once you’ve got this down, the natural next step is looking at link expiry and view limits — some tools let you make a link self-destruct after one view or after 48 hours. That’s a useful layer for anything truly time-sensitive.