Sharing files via links is probably one of the easiest ways we collaborate across teams and with external partners every day. But let's be honest: once a link is out there, how do you make sure the person opening it is actually who they say they are?
To help keep your sensitive content safe from unauthorized eyes, Box has rolled out One-Time Passcode (OTP) for Shared Links—now generally available!
What’s New?
Now, whenever you generate a shared link, you can add an identity verification step right from your link settings. You get two simple options:
-
Open Verification: Any recipient must confirm their email address before accessing the content.
-
Access List Only: Restrict access exclusively to specific approved email addresses or domains.
Seamless for Box Users
If your recipients are already signed into Box (whether on the web, mobile, or Box Drive), there is zero extra friction—their identity is verified automatically! The OTP prompt is only presented to anonymous/unauthenticated visitors.
Availability
OTP for Shared Links is available across all Business plans and above at no extra cost. Plus, Box Shield customers will soon be able to auto-enforce OTP requirements using classification rules and automated access policies.
To learn more about shared links at Box, check out Shared Links Frequently Asked Questions