Sending documents via link feels more practical than downloading and sending attachments. However, issues usually arise not because the technology is difficult, but because we rush to hit Copy link without checking who can actually access the file.
Documents like identity cards, payment proofs, contracts, customer lists, or health check results are not the same as regular photos. Once the link is shared in a group or forwarded to others, the file owner can lose control over who sees it.
Google Drive, for example, offers access options like Restricted, Anyone with the link, and in certain conditions, public access. This distinction is important because “having the link” does not always mean “only the intended recipients” can access the file.
Here are some simple checks you should perform before sharing any document.
1. Check who has access
Open the Share menu and look at the list of people or accounts that have been granted permission. Don’t just check the email addresses of new recipients. The file may have already been shared with family members, coworkers, or a group.
In cloud storage services, access can also come from parent folders. This means someone might be able to open the file not because their name is directly added to the file, but because they have access to the folder where the file is stored.
If the document is private, the safest option is usually Restricted or limited access to specific accounts. Google explains that in this mode, only people with permission can open the file. Learn about Google Drive access settings.
2. Don’t confuse “can view” with “can edit”
Check the recipient's role. Generally, there are several levels available:
- Viewer: can only view the document.
- Commenter: can view and comment, but cannot change the main content.
- Editor: can change the content and, depending on the settings, may also share the file.
For final documents, you usually only need to select Viewer. If the person only needs to provide input, use Commenter. Avoid granting editor access just to facilitate collaboration.
This is not just about tidiness. Editors can change the document's content, delete certain parts, or forward access if the sharing settings allow it. Grant the least permissions necessary to get the job done.
3. Be cautious with the “anyone with the link” option
The Anyone with the link option is useful for materials intentionally shared widely, such as event posters, public forms, or guide documents. However, this option is less suitable for personal data or internal documents.
Think of the link as a spare key. Anyone who obtains that key may be able to enter, even if you never granted permission directly. Links can be forwarded, copied into chat histories, or appear in screenshots.
According to privacy guidelines from the Federal Trade Commission, privacy settings do not always allow us to fully control who ultimately sees something shared online. Therefore, access settings should be accompanied by a more fundamental decision: does this information really need to be shared?
4. Remove unnecessary information
Before uploading or sharing a file, ask: which parts are truly needed by the recipient?
For example, the administration may only request proof of account ownership. You might not need to send the entire three-month account statement. Irrelevant parts can be removed or redacted beforehand.
For identity cards, consider adding a watermark such as “For registration verification [service name], [date].” A watermark is not absolute protection, but it can reduce the risk of the document being used in other contexts and help clarify its original purpose.
Avoid editing the original document if it is still needed. Create a separate copy for sharing, then delete that copy when the matter is resolved.
5. Test the link before sending
After setting permissions, don’t immediately forward the link. Test it first in a simple way:
- Copy the document link.
- Open a private browser window or use another account.
- Try accessing the link.
- Check whether the file requires login or can be accessed by anyone.
This test helps identify common mistakes, such as the file being accessible without login or the recipient only being able to see the folder but not specific files.
If the document needs to be opened by one person, it’s better to share it directly to their email address rather than using a link that can be forwarded indefinitely.
6. Remember to revoke access
Sharing access does not have to be permanent. Once the matter is resolved, go back to the Share menu and remove recipients who no longer need the file.
Some work or school accounts also provide expiration dates for certain access. If that feature is available, use it for temporary project documents, internal meeting invitations, or files only needed during administrative processes.
Revoking access does not always retract copies that have already been downloaded, photographed, or forwarded. However, this step is still important to prevent ongoing access from links or accounts that were previously granted permission.
Quick checklist before hitting “Send”
- Is the file shared with the correct accounts?
- Is the access limited or open to anyone with the link?
- Is the recipient set as a viewer, not an editor?
- Is there data that doesn’t need to be included?
- Has the link been tested from another account or browser window?
- When will access be revoked?
What does this mean for us?
Sharing files is not just about sending a link address. Behind it lies a decision about the identity of the recipient, the level of trust, the duration of access, and the amount of information we want to relinquish.
Cloud storage technology can help work become faster, but it cannot replace human judgment. When in doubt, use a simple principle: share the least amount of information, with the most specific people, for the shortest time possible.
That’s a small habit that makes digital documents safer without drastically changing the way we work.
Sources & further reading
- Google Drive Help — Share files from Google Drive
- Google Workspace Learning Center — Share files and folders in Drive
- Federal Trade Commission — Share with Care
– Rio Yotto @rioyotto