How to Use Password Protection for Links in UseClick

What is Password Protection?

Password Protection is a security feature that requires users to enter a password before they can access the destination URL. When someone clicks your protected short link, they'll see a password prompt page instead of being redirected immediately. Only users who enter the correct password can view the target content.

This feature is perfect for sharing exclusive content, client materials, event resources, or any information you want to restrict to specific people without making it publicly accessible.

Why Use Password Protection?

Plan Availability

Password Protection is available on these plans:

Plan	Password Protection	Password Changes
Free	Not available	-
Starter	Yes	Unlimited
Growth	Yes	Unlimited
Pro	Yes	Unlimited
Business	Yes	Unlimited

How to Add Password Protection

Step 1: Create or Edit a Link

1. Go to your UseClick dashboard
2. Either create a new link or click the three-dot menu (⋮) on an existing link
3. Select "Edit" to open the link editor

Step 2: Enable Password Protection

1. In the link editor, scroll to the "Security" section
2. Toggle "Password Protection" ON
3. Enter a strong password in the password field
4. Re-enter the password to confirm (prevents typos)
5. Click "Save Changes"

Step 3: Share the Link and Password

Important: You need to share BOTH the link AND the password with your intended audience. UseClick doesn't send the password automatically for security reasons.

Secure Sharing Methods:

• Send the link via one channel (email, social media) and the password via another (text message, phone call)
• Use encrypted messaging apps like Signal or WhatsApp
• Share in person or over a video call
• Include password in a separate email with encryption

Password Requirements & Best Practices

Password Requirements

• Minimum Length: 4 characters (8+ recommended)
• Maximum Length: 128 characters
• Allowed Characters: Letters, numbers, spaces, and special characters
• Case Sensitive: Yes—"Password123" and "password123" are different

Creating Strong Passwords

Best Practices

1. Use Descriptive Passwords: Include context like event name, date, or client name to help recipients remember
2. Change Regularly: For long-term protected links, update passwords periodically
3. Don't Reuse: Use unique passwords for different links to prevent widespread access if one leaks
4. Avoid Personal Info: Don't use birthdays, names, or easily guessable information
5. Document Securely: Store passwords in a password manager, not in plain text files

Common Use Cases

1. Client Deliverables

Scenario: You're a designer sharing mockups with a client before the final launch.

Setup: Create a password-protected link to your design presentation. Share the link via email and send the password via text message. Update the password after each review cycle for added security.

Password Example: ClientABC-Draft3

2. Event Resources

Scenario: You hosted a paid webinar and want to share the recording and slides with attendees only.

Setup: Create a password-protected link to your resources page. Include the link in your post-event email and announce the password at the end of the webinar. This ensures only real attendees access the materials.

Password Example: Webinar-Jan2025-Resources

3. Beta Product Access

Scenario: You're launching a new SaaS product and need to share it with beta testers.

Setup: Create a password-protected link to your signup page. Share the link publicly (Twitter, blog) but only share the password with accepted beta testers via email. Easily control access by changing the password if needed.

Password Example: BetaAccess-Wave1

4. VIP Early Access

Scenario: You're offering early access to a sale for your top customers.

Setup: Create a password-protected link to your sale page that goes live 24 hours before the public launch. Email your VIP list with the link and password. Change the password or remove protection when the public sale starts.

Password Example: VIP-Early-Bird-2025

5. Internal Team Documents

Scenario: You need to share company documents with remote employees.

Setup: Create password-protected links to Google Drive folders, Notion pages, or internal wikis. Share links in your team Slack and post the password in your team's private channel. Rotate passwords quarterly for security.

Password Example: TeamDocs-Q1-2025

Managing Password-Protected Links

Changing a Password

1. Go to your dashboard and find the protected link
2. Click the three-dot menu (⋮) > "Edit"
3. In the Security section, enter a new password
4. Confirm the new password
5. Click "Save Changes"
6. Notify users of the new password via your chosen secure channel

Removing Password Protection

1. Edit the protected link
2. Toggle "Password Protection" OFF
3. Click "Save Changes"
4. The link now works without a password—anyone with the link can access it

Viewing Password-Protected Link Analytics

UseClick tracks analytics for password-protected links differently:

• Password Page Views: Tracks how many people saw the password prompt
• Failed Attempts: Counts incorrect password entries
• Successful Access: Tracks users who entered the correct password and accessed the content
• Conversion Rate: Shows what percentage of people who saw the prompt successfully entered the password

These metrics help you understand if people are struggling with the password or if unauthorized users are attempting access.

Security Considerations

How Passwords Are Stored

UseClick uses industry-standard security practices:

• Bcrypt Hashing: Passwords are hashed using bcrypt with a strong work factor
• Never Plain Text: We never store passwords in readable form
• Salt per Password: Each password has a unique salt to prevent rainbow table attacks
• No Password Recovery: We can't retrieve your password—you can only reset it

Limitations of Password Protection

Understand what password protection does and doesn't do:

• Not DRM: Once someone has the password and accesses content, they can share the destination URL
• Shared Secrets: Anyone with the password can access the link—you can't revoke access for specific individuals
• Password Sharing: Users may share the password with others you didn't intend to have access
• Not Encryption: The destination URL itself isn't encrypted, just access-controlled

When to Use Additional Security

For highly sensitive content, combine password protection with other measures:

• Link Expiration: Set an expiration date so access is time-limited
• Click Limits: Limit how many times the link can be accessed
• IP Whitelisting: Use your destination platform's IP restrictions
• Two-Factor Auth: For very sensitive content, require login at the destination with 2FA

Troubleshooting

Issue: Users Say Password Doesn't Work

Common Causes:

• Password is case-sensitive—verify capitalization
• Extra spaces before/after the password
• Using an old password after you changed it
• Autocorrect changed the password during entry

Solution: Ask users to copy-paste the password instead of typing. If issues persist, change the password to something simpler and reshare.

Issue: Can't Remember the Password

Solution: UseClick doesn't have a "view password" feature for security reasons. You must change the password:

1. Edit the link
2. Enter a new password
3. Save changes
4. Share the new password with users

Issue: Too Many Failed Attempts

Symptom: Analytics show many failed password attempts.

Causes:

• Password is too complex or confusing
• Users didn't receive the password
• Unauthorized users trying to guess the password

Solution: Simplify the password if legitimate users are struggling. For security concerns, change the password and reshare only with intended recipients.

Issue: Want to Give Temporary Access

Scenario: You want someone to access the link for a limited time.

Solution: Combine password protection with link expiration. Set an expiration date (e.g., 7 days), share the password, and the link will automatically stop working after the deadline.

Frequently Asked Questions

Can I use different passwords for the same destination URL?

Yes! Create multiple short links pointing to the same destination URL, each with different passwords. This lets you track which groups accessed the content or revoke access for specific groups by changing only one password.

Will password protection slow down redirects?

There's a slight delay since users must enter the password, but the password verification is instant (< 100ms). The delay is in user interaction, not technical performance.

Can I see who accessed the protected link?

UseClick tracks clicks and password attempts but doesn't identify individual users for privacy reasons. You'll see total successful accesses, but not "who" unless you create unique passwords per person and track which password was used.

What happens if someone shares the destination URL directly?

Password protection only secures the short link itself. If someone accesses the destination and shares that full URL, others can bypass the password. For deeper security, use authentication at the destination (login required).

Can I have multiple passwords for the same link?

No. Each link has one password. To provide different access levels, create multiple short links with different passwords or use other access control methods at your destination.

Does password protection work with geo-targeting?

Yes! You can combine password protection with geo-targeting. Users will need to enter the password regardless of their location, then they'll be redirected based on their country.

Can I password-protect a Link in Bio page?

Not directly. Password protection applies to individual short links. However, you can create a password-protected link to your Link in Bio page if needed.

Next Steps

• Add expiration dates to automatically disable links after a deadline
• Set click limits to control how many times a link can be accessed
• Learn more about creating links with other advanced features
• Use the API to programmatically create password-protected links