Can You Password Protect a Google Drive Video? What Actually Works
Google Drive has no password box on a share link, only Google accounts and Anyone with the link. What that means for client cuts, the hacks that break, and how I pair Drive with a password protected review link.
Two years ago, when a client asked my agency to password protect a Google Drive video before it reached their board, my reply was basically a small essay, right, about how Drive doesn't do passwords and how their Outlook work address would be asked to sign in with Google first. It ended with the offer to switch the file to Anyone with the link and trust that nobody forwarded it, and most of the time the client said fine, so the cut went out with no protection at all, the exact opposite of what they had asked me for.
The way I run it now is a lot more boring, and I mean that as a compliment, right. The cut goes into PlayPause, the link goes out by email and the password goes on WhatsApp, the client opens it in a browser with no account, clicks the frame that bothers them and types the note on that frame, and the day the round closes I revoke the link. Drive is still in the picture, it just moved from being the thing I send to clients to being the place where the files quietly live.
So this one is for the small business video team or freelancer who keeps everything in Drive and has just been asked for a password on the link.
Can you put a password on a Google Drive video
The short answer is no, not in the way your client means it, right, because Google Drive has no box where you type a password onto a share link. Drive only controls access by who you are, meaning the Google account you're signed into, or by whether you're holding the link, and a password fits neither, which is why every guide ranking for this question ends up teaching you a workaround instead of a setting.
Google Drive has no password option on a share link. Access comes from a Google account added to the file or from Anyone with the link, so a real password needs a different tool.
The workarounds people try and where they break
I've tried the two usual workarounds in my own agency, so let me be fair to each before I tell you where it broke.
The first is zipping the video into a password protected archive and uploading the zip to Drive. It works, but the client can't press play in the browser anymore, they have to download and extract a 4 GB export on hotel wifi, which is a very very bad first impression, and once it's extracted the file sits on their desktop with no password at all.
The second is the Google Form trick, where one question with response validation guards a confirmation message that holds the Drive link. It looks like a password gate, and the catch here is that the link on the other side is still an Anyone with the link share, so the first person who copies it into a group chat walks straight around your form, and third party password pages placed in front of a Drive file usually leave that same open link underneath.
How Drive sharing permissions really work
When you hit Share on a video in Drive you're making two separate decisions, right. The first is General access, either Restricted, where only people you've added by email can open it, or Anyone with the link, where whoever holds the URL opens it without signing in. The second is the role, Viewer, Commenter or Editor, which decides what they can do once inside.
Restricted is the closest thing Drive has to real protection, because it checks who you are rather than what you're holding, and to be very honest it's solid when everyone on the other side lives inside Google. Plenty of clients don't, the brand manager is on Microsoft 365, the founder's address was never tied to Google, and so on, so each of them hits a sign in screen first. Paid Google Workspace does have visitor sharing, where someone without a Google account verifies with an emailed code, but an admin has to switch it on and most small teams never have.
Locking a Drive video down as far as it goes
If the file has to stay on Drive, this is the tightest setup I know:
- Open Share and set General access to Restricted, so the link alone opens nothing.
- Add each reviewer by email as Viewer, or Commenter if you want written notes.
- Click the gear icon and untick download, print and copy for viewers and commenters.
- On paid Workspace, give each person you added an access expiry date.
- Share the single file, never its parent folder.
Does that make sense, right, the tightest Drive setup forces a sign in on exactly the client who asked you for a password, and as far as I know an Anyone with the link share can't carry an expiry date at all.
Switching off downloads also removes a button while a phone pointed at the laptop screen still works fine. And in my agency the notes that came back through Drive arrived as text about the whole file, so "the logo looks off" turned up with no timecode and somebody scrubbed six minutes to find it.
The risk of anyone with the link access
Most small teams end up here because it's the only setting where the client clicks and the video simply plays, with no sign in screen in the way. The problem is that the link has become the whole lock, right, and a link is really really easy to copy.
Follow that URL through a normal week, forwarded to the client's boss, dropped into a Slack channel of forty people, saved in a coordinator's notes app, and every copy opens the video with nothing in the way and very little you can check about who pressed play.
Then there's time, because an open share never ends on its own, so a rough cut where the founder still says the launch date they later moved keeps playing eighteen months on. Share the folder instead of the file and that link opens every cut sitting next to it too, and I'm pretty sure most freelancers have never thought about that.
The rule I hold my own agency to is simple enough for a two person shop, right, know who has access and be able to take it away from one person without touching anyone else. Anyone with the link fails both, which is also why NDA work never goes out on an open link from us and gets shown through password protected portfolio links instead.
opens for whoever holds the URL, notes arrive with no timecode, and it keeps playing long after the project ends
needs the password, opens without an account, pins every note to a frame, and stops the moment you revoke it
A password isn't a complete plan on its own, which is why I wrote about whether video password protection is enough, but it beats a URL anyone can paste anywhere.
A password protected link clients open without an account
What the client wanted when they asked for a password was two things at once, right, that strangers can't open the cut and that they themselves can open it without a fight. Drive gives you one or the other, and a password protected review link is basically the setting Drive doesn't have, where holding the URL isn't enough and nobody needs an account either.
In PlayPause, password protected links come on every plan, starting with Creator at $9 a month. The client opens the link in any browser with no account and no install, types the password, and the video plays from a streaming copy while your original file is never touched. They click the exact moment, leave a comment that sticks to that frame, draw on it when "move the product left" is easier shown than typed, and MV2 stacks on the same card instead of landing in a folder of files called final_v2_REAL, which is really just version control for people who never wanted to learn the term. The clicks are in how to password protect a review link, and every control is on the sharing and security page.
A worked example with an embargoed launch film
Say you're a two person team cutting a 90 second launch film for a small kitchenware brand, with the product under embargo until a trade show six weeks out. The founder, a department store buyer and an outside PR freelancer need to see it, and none of them share an email domain. On Drive you'd either chase three Google accounts or send an open link the buyer, for instance, could forward to a whole category team in one click.
On a review link I'd upload MV1, email one password protected link to all three and send the password separately on WhatsApp, so a forwarded email alone only lands someone on a password box. Who watched analytics, on Creator and up, shows who opened it, when and from which city, so if it's opened somewhere none of those three people are, I revoke it and send them a fresh one. I also write the review window, meaning the date each round's link gets revoked, into the statement of work, so nobody is surprised when an old link stops opening.
Revoking access when a Drive share would linger
This is the part I underrated for years, right. In Drive you end an open share by switching it back to Restricted, which works, but it's a manual job nobody owns, so the link lingers until someone opens the sharing menu again, which in my agency, trust me on any level, meant never.
In PlayPause revoking is instant on every plan, and links also have a ceiling if you forget them, 30 days on Creator, 90 days on Agency and never on Enterprise. On Creator the files themselves expire after 30 days too, so it isn't long term storage, which is one more reason Drive stays in my setup.
The habit I'd copy is one link per round, revoking the old one the day the new version goes out, after checking the analytics so you know the client actually watched. An MV1 link left open is how notes on a replaced cut keep arriving after MV3, which is the quiet kind of scope creep that eats a week, and solo editors can see the full setup under secure share links for freelance editors.
Using Drive and a review link together
I don't think the answer is leaving Google Drive, because for storing raw footage and syncing project files it's really good. Where it struggles is acting as a screening room for people outside your company, right, and asking it to do that job is where every one of these password workarounds comes from.
So in my agency the split is clean, raw footage and project files live in Drive with the masters, and anything a client needs to watch and comment on goes out as a password protected review link. On the Agency plan, $19 a month with 50 members and 250 GB of storage, the Google Drive integration lets viewers save a file to their own Drive and gives you a Drive backup, so a client who wants the final in their Drive gets it without me opening my folders to them. For cuts inside your own team, see sharing video privately with your team.
- Is this a draft that needs notes or a final that just needs to arrive
- Does every reviewer have a Google account
- Would it hurt if the link got forwarded
- Do you know the date access should end
- Should the file stay in your Drive afterwards
The PlayPause vs Google Drive comparison has the longer side by side, WeTransfer vs Google Drive for video covers the client who only needs the final file, and Google Drive vs Frame.io is for teams weighing a heavier tool. You see what I mean here, right, Drive answers where the file lives and the review link answers who watches it and for how long, and at the end of the day, once I stopped asking one tool to answer both, a password request became a two minute job.
Frequently asked questions
Can I add a password to a Google Drive link?
No, Google Drive has no password setting on share links, only Restricted sharing for named Google accounts or Anyone with the link. A password protected zip or a Google Form gate either stops the video playing in the browser or leaves an open Drive link behind the gate, so for a real password I send the cut on a review link and keep the file in Drive.
How do I restrict Google Drive video access to specific people?
Set General access to Restricted, add each person by email and choose Viewer or Commenter for them. They'll need to sign in with a Google account tied to that address, although on Google Workspace an admin can enable visitor sharing for people without one. For video I'd also turn off the download option for viewers and commenters, while remembering that a screen recording still gets around it.
Is it safe to share a client video with Anyone with the link?
It's fine for things you wouldn't mind leaking, a finished public ad for instance, and risky for anything under NDA or embargo, because the link is the only lock, it gets forwarded without you knowing, and it keeps working until you switch it back to Restricted. For drafts I send a password protected link that I can revoke the day the round ends.
Do my clients need a Google account to open a PlayPause link?
No, clients open a PlayPause share link in any browser without an account or an install, type the password if you've set one, and comment on exact frames straight away. That was the main reason I moved client review off Drive, because the client who lives in Outlook now gets exactly the same experience as the one who lives in Gmail.
If your clients keep asking for a password and Drive keeps making you write that essay, send the next cut on a review link instead. Compare the plans on the PlayPause pricing page and run one real client round on the 7-day free trial, with Drive still holding the files and the link doing the protecting.
So yeah. That's my way of saying it.
Saumyajit co-founded PlayPause after years watching review and approval quietly eat creative teams' deadlines. He writes about the workflow side of video, feedback, versioning, and getting to a clean sign-off.
Related resources
Keep reading
Bring your team into one review space
Centralize feedback, lock approvals, and deliver faster, start free today.
Sign Up for Free