Secure file sharing without account: a layered guide
Send contracts, invoices and footage on a link clients open without signing up, with four layers of control.
Secure file sharing without account comes down to four questions you answer on the link itself: who can open it, how long it works, how many times it works, and what you can see afterwards. On a public link, your client clicks, types a password if you set one, and gets the file. No registration, no new login to forget.
Friction is what loses. A freelancer sending an invoice needs a link the client opens in one step, not a portal they must learn first. The controls below add protection only where the files need it.
Secure file sharing without account: start with the link
The base layer is a link the recipient can open without an account. In Tarkle you pick files or folders, get one link and send it anywhere. No account is needed to download. Every transfer gets its own page with your logo and colours. An organization on Free can create 15 transfers a month, and Pro is unlimited.
Everything below is a control you add on top of that link. Add only what the files deserve. A signed contract needs more than a mood board does.
Layer 1: who can open it
The first control is a password asked for before the page opens. Without one, anyone who gets hold of the link can open the transfer. With one, they also need the password. You can also protect shared files with passwords on the Free plan.
The second control is email capture. It asks for an email address before a download starts, and each address is saved as a contact in your list. It tells you who took the files. It is a record, not proof of identity: the address is whatever the person typed, so treat it as a record, not a lock.
Send the password through a different channel than the link. If the link goes by email, give the password by text message or a phone call. Someone who gets into one inbox should not get both halves.
Layer 2: how long it works
A link that stays live forever becomes a quiet liability. With link expiration you set a date after which the transfer stops working, when you create the transfer. In your list, Burned, Expired and Disabled transfers are marked, so you can see what is still live.
Match the date to the job. A contract can expire after the signing deadline. An invoice can expire when payment is due. Footage for a review can expire when the review round closes. If a client needs it later, send a new link.
Layer 3: how many times it works
For files that should be taken once, use a one-time download link. It stops working after its first download, and if someone needs a second go you issue a fresh link. It suits a contract or an invoice where one person should collect the file.
It is a poor fit for a drawing the client needs on site next week, because they cannot open it again. For those, a password and an expiry date do the work better.
One distinction trips people up. A direct download link starts the download the moment it is opened, with no page in between. That is handy for a link pasted into a document or a tool. When you want a message, a preview or an email gate before the download, send the normal branded transfer page instead.
Layer 4: look without taking
Sometimes the client should see the work but not take it. A view-only transfer shows the files and removes the download option. Use it for review rounds on drawings or draft footage.
Be clear about what it does. View-only reduces casual copying. It cannot stop someone from taking a screenshot of what they can see, so do not use it for anything secret.
Taking a link back
Sent the wrong file, or the project ended? You can disable a link in one click. Disable the transfer and the link stops working straight away. It shows a Disabled badge so you remember it is off, and you can turn it back on later.
When you replace a file with a corrected version, disable the old transfer before you send the new link. Otherwise the client may open the draft they already had in their inbox.
Seeing what happened afterwards
A protected link is only useful if you know whether it worked. Transfer status shows badges for whether the notification email was delivered, how many times the page was viewed, and whether the files were downloaded. Burned, Expired and Disabled transfers are marked too. Downloaded means a download was recorded.
Read the badges for what they say. A view count means the page was opened, not that anyone read the file. If a contract shows its email was delivered and no download after two days, follow up by phone instead of guessing.
When a client should have a portal instead
A single transfer suits one-off sends. If a client comes back every month for new files, a link each time gets repetitive. The client portal gives each client one branded place to find what you shared and send files back. The client signs in with their email and a code sent to that address, and passwordless sign-in means there is no password to remember. For a client to sign in, they must be a contact with portal access turned on.
The client portal is part of Pro and Agency. Recipients of a single transfer never need it.
What a link cannot do
Everything above controls access. A link decides who reaches the files, for how long and how often, and it shows you what happened. It is not a statement about how the content itself is protected or stored, and this guide makes no claim about that.
Four limits follow. Anyone who has both the link and the password can open it, including a person the client forwarded them to. A screenshot cannot be recalled. A transfer a client pays for takes none of these controls: it cannot have a password, an expiry date, a one-time or view-only setting, or an email gate, because payment is the access gate. And a link in the wrong inbox is only as safe as that inbox. If a file truly must not leave a small circle, share it with named people through a client portal, or do not send it electronically at all.
A checklist before you press send
Decide how sensitive the files are, and add only the layers they need.
Set a password for anything private, and send it through a different channel than the link.
Pick an expiry date that matches the job.
Use a one-time link for single-use documents, but not for files the client needs again.
Use view-only for review rounds, and remember it cannot stop a screenshot.
Check transfer status after a day or two, and follow up if nothing was downloaded.
Disable the link when the file is replaced or the project ends.
To see how branding sits on top of these controls, read how to set up branded file sharing links. If you only need to avoid asking clients for a Google login, sharing without a Google Drive account covers that case.
What to remember about Tarkle
On a public link, clients open a file without creating an account. You add only the layers each file needs: a password, an expiry date, a one-time download or view-only access, and a status you can check afterwards. The Free plan costs $0 forever with no credit card required, and it includes password protection for shared files. For clients who come back every month, the client portal is part of Pro and Agency. Start for free.
