← Back to blog

Google Drive will expire a named share. "Anyone with the link" will not.

· TinyX · 4 min read

Google Drive will expire a named share. "Anyone with the link" will not.

You clicked Anyone with the link in Google Drive because it was faster than typing emails. The pitch finished. The contractor rolled off. The folder still sits in My Drive.

The link still works.

That is not a rare misconfiguration. It is how Drive's easiest sharing mode is documented to behave — and it is the mode Google's own expiry feature does not cover.

Does Google Drive let you expire a share?

Sometimes. Google's own help shows how to add an expiration date next to a named person on eligible work or school accounts: open Share, open the person's menu, choose Add expiration, pick a date within a year, save. The Workspace learning center walks the same path under "Set expiration limits."

That is useful for a named reviewer who should lose access after the deal week. It is not what most teams do when they need to send a pack right now.

What "Anyone with the link" actually does

Drive's general access controls include Anyone with the link: anyone who has the URL can open the file without a Google account. You pick Viewer, Commenter, or Editor, copy the link, paste it into Slack or email, and move on.

There is no expiry step in that flow. Independent walkthroughs of Drive sharing are blunt about the gap: the anyone-with-the-link option does not offer sharing expiration — only per-person permissions do. To shut the door you change general access back to Restricted (or delete the file forever). Nobody will remind you.

So the safety rail exists for the careful path. The convenient path has none.

Why that asymmetry becomes a forever leak

"Anyone with the link" is the default escape hatch when:

  • The recipient is outside your Workspace domain
  • You do not want to collect Google accounts first
  • A folder needs to reach a client, freelancer, or partner today

Those are exactly the shares that get forwarded, bookmarked, and left in old threads. A year later the project is closed and the URL is still a live door. Security writers have been saying this about cloud share links for years; we covered the broader pattern in Your share link from 2021 still works. Drive's twist is sharper: expiry is marketed for named access, then skipped for the link mode teams reach for under deadline pressure.

Quiet failure modes look boring until they are not:

  • A closed matter folder still on Anyone with the link
  • A freelancer from two projects ago with the URL in their mail
  • A one-file share that later sat inside a fuller folder whose permissions widened
  • A forwarded link that reached people you never invited

None of that requires a breach. Drive did what you asked.

For how "encrypted at rest" still is not the same as zero-knowledge custody, see Dropbox is encrypted. That is not zero-knowledge.

What controlled external sharing should default to

External handoffs need the opposite default: access ends unless you extend it.

TinyX is built for that lane — not as a Docs/Sheets editor, but as the door you open for proposals, packs, galleries, and short-lived deliveries:

  • Time-based expiry — the link deactivates after a date you set
  • Click-based expiry — useful for limited reviews
  • Password protection — a second secret beyond the URL

When the window ends, the destination stops resolving for new visitors. There is no soft redirect keeping the old URL warm. Recipients do not need a TinyX account to open a live link.

Soft close: free controls vs paid intake

On Free you already get outgoing file share with expiry and passwords — the two controls Drive's anyone-with-link mode will not give you. Upload drops (a short link clients use to send files into your inbox) start on Pro+. Caps and plan cards live on pricing; the product surface is on features.

We are not claiming Free is a zero-knowledge vault or that AES-256-GCM client-side encryption ships on every free transfer. Use the live feature list, not a marketing paraphrase, when you need the current encryption story.

Drive remains excellent for ongoing internal editing. Keep it for that. For the pack that should die when the job closes, stop pasting a forever link and send one that knows when to end.

Explore features, check pricing, or try TinyX free and put an expiry on the next external share before you copy the URL.