ShareFile

New secure sharing options

We’re taking steps to improve the security posture of file sharing. From now on all links default to use secure sharing options which apply across all ShareFile locations: ShareFile desktop app for Mac and Windows, ShareFile Web app, ShareFile Mobile app, ShareFile Plug-in for Microsoft Outlook and Gmail.

Default share permissions update

The default share permission is changing to “employee and client users sign-in” for every new link shared. The default share makes it easier for users to understand the access permissions of the shared links they’re creating.

We’re updating the default settings for shares to help you stay secure. Anytime you share a file, it starts with the secure option. You can change the view and download permissions if you don’t require security or privacy for that file.

We’ve added a message alerting users when they share a link that can be viewed by anyone. This alert ensures that the user is aware that using links anyone can view isn’t secured. These links are used for data that they’re comfortable sharing publicly.

The following message appears when “anyone” is elected for “who can access this link”:

  • Allow recipients to view -> “Creates a link that allows anyone to view what you’re sharing without signing in”

  • Allow recipients to download - > “Creates a link that allows anyone to download what you’re sharing without signing in”

Learn more subdomain

Note:

When selecting the “Anyone (public, must enter a name and email) option, the recipient is required to complete the reCAPTCHA request.

Learn more subdomain

After the link is created, a notation will remain next to the notating the view or download permissions:

  • Anyone can view without signing in

  • Anyone can download without signing in

    Learn more subdomain

ShareFile admins can now enforce log-in requirements on file shares and requests for their account. ShareFile allows users to create share and request links with different access options.

Note:

Only account administrators are enabled with this ability. If you are an employee user or client, please contact the account admin if you have any questions.

The following instructions provide ShareFile admins with the steps necessary to disable the Anyone (public) and Anyone (public, must enter name and email) share link options by requiring authentication for the overall account.

  1. From your ShareFile dashboard, navigate to Settings > Admin Settings > Security > Login & Security Policy > Share and request access options.

  2. To disable user ability to share links with anyone (public) users, select the toggle for Require authentication for share links.

    Learn more subdomain

    Users can only create share links that require sign-in to open.

  3. Scroll down and select Save.

Notes:

  • Once the toggle is set to Require authentication for share links you must select the first Save button on the Security page to save the changes.

  • Once the toggle is set to Require authentication for share links, you can disable the requirement by sliding the toggle off. Select Disable once the following confirmation screen displays.

    Learn more subdomain

The following instructions provide ShareFile admins with the steps necessary to disable the Anyone (public) and Anyone (public, must enter name and email) request link options by requiring authentication for the overall account.

  1. From your ShareFile dashboard, navigate to Settings > Admin Settings > Security > Login & Security Policy > Share and request access options.

  2. To disable user ability to share links with anonymous users, select the toggle for Require authentication for request links.

    Learn more subdomain

    Users can only create request links that require sign-in to open.

  3. Scroll down and select Save.

Notes:

  • Once the toggle is set to Require authentication for request links you must select the first Save button on the Security page to save the changes.

  • Once the toggle is set to Require authentication for request links, you can disable the requirement by sliding the toggle off. Select Disable once the following confirmation screen displays.

    Learn more subdomain

New secure sharing options