Free Tool
4.9/5

Free Password-Protected Link Generator

Lock any link behind a password in one step. Paste a URL, set a password, and share a link only the right people can open. No sign-up to start.

Free preview: 1 per day, self-destructs in 3h. Password protection is a Pro feature.

Get it permanently with Pro

Free to try, no sign-up. The password is bcrypt-hashed, never stored in plain text. Free links self-destruct in 3 hours.

Why password-protect a link?

A password turns a shareable link into a private one. Control who gets in, then see who actually did.

Lock any link in one step

Paste a URL, set a password, and get a protected short link instantly. Visitors hit a lock screen before they ever reach your destination.

Passwords are bcrypt-hashed

The password is never stored in plain text. It is hashed with bcrypt and checked on the server, so it cannot be read from the page.

Destination stays hidden

The real URL is only revealed after the correct password is entered, so nobody can peek at where the link goes.

See who unlocked it

Upgrade to Pro to watch who reaches the gate and unlocks the link: country, device, and browser, all in one dashboard.

Change the password anytime

On a Pro plan you can rotate the password whenever you like, instantly locking out anyone using the old one.

Brand it with your domain

Put your own domain on the protected link so the lock screen looks unmistakably yours, not an unfamiliar page.

Password-protect a link in 3 steps

Step 1: Paste the link you want to protect, password-protected link generator screenshot
1

Paste the link you want to protect

Drop in the URL of the page, file, or offer you want to lock. It can be any link you can share.

Step 2: Set a password, password-protected link generator screenshot
2

Set a password

Choose the password visitors will need to enter. It is hashed with bcrypt, never stored as plain text.

Step 3: Share the link, then upgrade to keep it, password-protected link generator screenshot
3

Share the link, then upgrade to keep it

Copy your protected short link and send it out. The free link self-destructs in 3 hours; upgrade to Pro to make it permanent and see who unlocks it.

Free preview or Pro: what you get

The free preview is perfect for a quick test: a real password gate that works right away but self-destructs in 3 hours. Password protection is a Pro feature, so the moment you want the link to last, to know who unlocked it, to change the password, to brand it with your own domain, or to protect many links at once, you upgrade to Pro.

FeatureFree preview (3 hours)Pro
Password gate works
Link never expires·
See who unlocked it (country, device)·
Change the password anytime·
Custom branded domain·
Bulk-protect many links·

Tips for sharing a protected link safely

Send the password separately

Share the link and the password through different channels (for example link by email, password by text). A single intercepted message then cannot expose both.

Use a strong, unique password

Pick something longer than a single word and not reused from another account. The strength hint in the tool nudges you toward a password that is hard to guess.

Do not put secrets in the URL

The password gates the destination, but the destination URL is still revealed after unlocking. Keep truly sensitive data behind a login on the destination, not in the link itself.

Watch who unlocks it

On a Pro plan you can see how many people reached the gate and unlocked the link, and from where. That tells you if a link has been shared more widely than you intended.

Frequently Asked Questions

What is a password-protected link?
A password-protected link is a normal short link with a gate in front of it. When someone opens it, they see a lock screen and have to type the correct password before they reach your real destination. It lets you share a private page, file, or offer with a link while keeping out anyone who does not have the password.
How secure is a password-protected link?
The link redirects through a password gate, so the destination is never revealed until the correct password is entered. The password is checked on the server, not in the browser, so it cannot be read from the page source. For sensitive material, share the password through a separate channel (for example, send the link by email and the password by text) so a single leaked message does not expose both.
Is the password encrypted or stored in plain text?
It is never stored in plain text. The password is hashed with bcrypt, a one-way algorithm, so even we cannot read it back. When a visitor enters a password, it is hashed and compared against the stored hash. This is the same approach used to store account passwords securely.
Do I need an account to create a password-protected link?
No, not to try one. You can lock a link with a password here and start sharing it right away without signing up. The link is real and the password gate works immediately, but this free preview self-destructs after 3 hours. Password protection is a Pro feature, so to make a protected link permanent (and to see who unlocked it or change the password) you upgrade to Pro.
Why do the free links expire in 3 hours?
Password protection is a Pro feature, so this tool gives a short, free taste rather than the full thing. Anonymous links are temporary so the tool cannot be abused and the database stays clean, and 3 hours is long enough to test that the password gate works. To keep a protected link permanently, upgrade to Pro and your links will never disappear.
Can I see who unlocked my link?
Yes, on a Pro plan. Pro records every visit to a protected link, including the country, device, and browser of each visitor, plus how many people reached the password gate and actually unlocked it, all in one dashboard. The free 3-hour preview created here does not include this analytics view, so upgrade to Pro when you want to know who got in.
Can I change the password later?
Yes, on a Pro plan. From your dashboard you can update or rotate the password on a protected link at any time, which instantly locks out anyone using the old one. The free preview links created here cannot be edited after they are made, so upgrade to Pro if you expect to change the password.
Is this tool really free?
It is free to try. Creating a password-protected link with this tool costs nothing and requires no sign-up or credit card, but the preview link lasts only 3 hours. Password protection itself is a Pro feature, so permanent protected links (plus analytics on who unlocked them, password changes, branded domains, and bulk protection) come with a Pro plan.
What happens when the link expires?
After 3 hours the preview link stops working and visitors see an expired-link page instead of the password gate, so your destination stays private. The destination URL itself is never affected. If you need a protected link that lasts, upgrade to Pro to create password-protected links that never expire.
Can I use my own branded domain for protected links?
Yes, on a Pro plan you can connect a custom domain so the protected link carries your brand (for example go.yourbrand.com/vault) instead of a generic domain. A recognizable domain reassures people that the lock screen is genuinely yours and not a phishing page. The free preview tool uses the flyn.to domain.
How is this different from just hiding a link?
Hiding or obscuring a link does nothing once someone has the URL, since the destination still opens for anyone who clicks. A password-protected link adds a real gate: even with the exact URL, a visitor cannot reach the destination without the password. It is access control, not just obscurity.
Is the destination checked for malware?
Yes. Every destination is screened against Google Safe Browsing and a category blocklist before a link is created, so the tool refuses known phishing, malware, and prohibited destinations. This protects both you and the people you share the link with, and keeps your protected links from being flagged as unsafe.

Keep your protected links with Pro

Your free preview link self-destructs in 3 hours. Upgrade to Pro to create password-protected links that never expire, see who unlocks each one by country and device, change the password anytime, and brand it with your own domain.