How to Restrict Video Link Sharing When Clients Love to Forward
Clients forward review links to bosses and outside partners. Here is how I design links per stakeholder group, split passwords, watch who opens them and revoke fast.
Video link sharing in my agency used to be very very simple, right, we uploaded the video, copied one link, dropped it into an email to the brand manager and basically hoped for the best. Within a day that link had usually been opened by her boss, two people from sales, a regional head in another city and, at least once that I clearly remember, an outside PR agency nobody had told us about. The notes that came back contradicted each other so badly that we spent the next round just working out whose opinion actually counted.
Now I run it completely differently, and the whole shift comes down to one idea, which is that you restrict video link sharing by designing the links before you send anything, instead of chasing a link after it has already travelled. Every stakeholder group gets its own link and password, the password travels separately, I check who watched after every send, and when the circle changes I revoke and reissue.
To be very honest, you cannot physically stop a client from pasting a URL into another email, right, but you can make a forwarded link useless without its password and spot quickly when somebody unexpected opens it.
Why clients forward review links in the first place
The first thing I had to accept is that clients almost never forward a link to cause trouble, right, they forward it because the approval chain inside a brand is much wider than the one person who emails you. Her head of marketing needs to nod and legal wants to check a claim, and since a review link feels exactly like a YouTube link to her, she just hits forward.
The catch here is that a review cut only makes sense to people who were in the brief. When a rough cut goes out with temp sound design and placeholder motion graphics, the core team knows the music is a scratch track. The regional head who got it third hand has no idea, so he writes a long note about music that was never going to ship, and that note lands next to the notes that actually matter.
There is also confidentiality, because a launch video for an unannounced product should not sit in the inbox of a partner agency that also works with your client's competitors. I've written about how creators can protect unreleased videos while sharing drafts for the same reason, and at the end of the day this is partly a scope problem too, which is why my agency revision policy now says plainly who gives notes on a round.
Design the link before you send it, because you will never catch a forward after it has gone.
Private video link sharing: unlisted, private and password links compared
Most of what ranks for sharing a video privately lumps three different things together, so this is how I rank them by how well they actually restrict video access:
- Unlisted link: hidden from search, but anyone holding the URL can watch, so a forward works perfectly for whoever receives it.
- Account-only private link: only invited people can watch, but every viewer has to sign up and log in, and clients really really hate that.
- Password-protected review link: anyone can open the page in a browser, but nothing plays until they type the password, so a bare forward shows a locked door.
I'm pretty sure unlisted links still cause most accidental leaks, because an unlisted link is private only in the sense that nobody stumbles onto it, right, it does nothing once somebody hands it on. My piece on whether a Vimeo private link for client review is enough goes deeper, and the short version is that it suits a finished public video and not a cut still being argued about.
The account-only route looks great on paper, until the client says the link does not work and you send a normal one just to keep the round moving. So for client review I land on password links every time, because in PlayPause the client opens one link in a browser with no account and no install, types the password, and leaves comments that stick to the exact frame.
One link per stakeholder group to limit who can view a video
The biggest single change I made was to stop sending one link to everyone. A single link put the core team, the approvers and any outside partner behind the same door with the same key, so changing the key meant changing it for everyone halfway through a round.
Now, before the first cut goes out, I spend two minutes with the brand manager working out who actually needs to see it. For instance, a typical campaign has the core team who owns the brief, the senior approvers who sign off, and outside partners like a PR agency, and each group gets its own share link and password. My own editors and producers work inside the workspace as members, so they never need a share link at all, and my walkthrough on how to get a shareable review link covers the mechanics.
This turns one blunt decision into several small precise ones, right, so when the PR agency's part ends I revoke their link and the core team never notices. It also makes a multi-stakeholder video review much calmer, because a link made for one group quietly tells them it is not theirs to pass along.
forwarded freely, one password for all, and every change breaks everyone's access
each group has its own password, so you revoke one group without touching the rest
A worked example from a launch round
Here is how a launch round runs for me now, with the details made up but the sequence exactly what I follow. Say we are cutting a 45-second launch film for a skincare brand, so after the kickoff call I create three share links, one for the brand manager's core team, one for her head of marketing and legal, and one for the outside agency running the press day, each with its own password.
On Monday the links go out by email and each password goes by WhatsApp to the lead person in that group. By Tuesday evening the who-watched view shows everyone I expected, plus one view on the approvers' link from a city where the brand has no office. I message the brand manager, she tells me it is a regional head she forgot to mention, and I make him his own link.
On Thursday the press day moves and the outside agency is off the project, so I revoke their link and nobody else is affected. When MV2 stacks on the same card the next week, their old link is still a closed door, so nothing dramatic happened, right, and every change took about a minute.
Passwords that travel separately from the link
A password only protects you if it does not travel with the link, and this is where most teams undo their good work, right, they put both in the same email and the client forwards the whole thing. So my rule is that the link goes by email and the password goes somewhere else, usually a WhatsApp message or a Slack DM to the one person it was meant for, or it gets read out on a call.
That sounds odd coming from me, because I work hard to keep revision notes off WhatsApp and I still mean every word. The password is the one exception, because it carries no feedback at all, and keeping it apart from the email is exactly what makes a forward harmless while the notes still go on the frame.
Password links and instant link revoking are on every PlayPause plan, and my guide on how to share a video securely has the full setup. If you run an ad agency, the page on password-protected review links for agencies is worth a look too, because launch work is where a forwarded cut costs the most.
- Link sent by email, password sent through a different channel
- A different password for every stakeholder group
- Passwords that are more than the brand name and the year
- Password never in the subject line or the same thread
- A new password every time a link is reissued
Spotting unexpected viewers by name, time and city
Even with passwords, I assume a link and its password will eventually reach someone I did not plan for, because a brand manager might forward both to her boss. So the second layer is looking, and PlayPause has who-watched analytics on every plan, starting at Creator, showing who opened the link, when and from which city. I check it within a day of every send.
What I look for is anything that does not match the picture I built with the brand manager, like a city where the client has no office, a name nobody mentioned, or a late-night view a week after the round closed. My full piece on how to see who watched your video covers reading the data without getting paranoid.
Most of the time the answer is completely innocent, right, a senior person travelling or an approver somebody forgot to mention, so I never accuse anybody. I just tell the brand manager I noticed a view from somewhere new and ask if that person needs their own link, which basically turns a possible leak into a better grouping. You see what I mean here, the analytics make sure the circle you designed stays the circle you actually have.
A name you have never heard or a city with no client office is your cue to ask the brand manager, calmly, whether that person needs their own link.
Revoking and reissuing links as the circle changes
The circle around a video never stays fixed for a whole project, right, somebody joins halfway, a client-side freelancer finishes their part, an outside agency's contract runs out, and the link setup has to move with all of that. I also revoke when a view turns up that nobody can explain, or when the final cut is approved and I want the rounds properly closed.
Instant link revoking means the link stops working the moment I kill it, so whoever saved it finds a closed door the next time they click. Then I reissue a new link with a new password, sent only to the people still in that group, and the project stays where it is, with its versions stacked as MV1, MV2, MV3 and so on. Trust me on any level, the first time you revoke a link mid-round and nothing breaks for the core team, you will never go back to one link for everyone.
Link lifetimes that end forwarded links on their own
The last layer is one I did not appreciate for a while, which is that on PlayPause the link lifetime depends on the plan, so it works as a safety net for any link I forget to revoke.
On Creator, links run for 30 days and the files expire with them, which suits short campaign reviews really well, right, because a forwarded link closes itself before it can do much damage. Agency links last 90 days, which fits retainers where videos go back and forth over a quarter. Enterprise links never expire, which suits a permanent library of approved work, so there you lean harder on passwords and revoking, and Enterprise also adds white-label and a custom share domain like review.yourbrand.com. The sharing and security page lays out every layer side by side.
Frequently asked questions
Can I completely stop a client from forwarding a video link?
No tool can stop someone copying a URL into another email, right, and I would be lying if I said otherwise. What you can do is make the forward useless and visible. With the password sent through a separate channel, a forwarded link opens to a locked page, who-watched analytics shows who got in and from which city, and instant link revoking shuts it the moment something looks off.
Do clients need an account to open a password-protected link?
Not at all, the client opens the link in any browser, types the password you sent separately, and can watch and comment straight away, with nothing to install. Comments stick to the exact frame and they can draw on it too. That is why I prefer password links over account-only private links, because clients never get stuck at a sign-up screen and come back asking for a normal link.
Is an unlisted link good enough for client review?
For a finished video you are happy for anyone to see, it is fine. For a cut still in review I would avoid it, because an unlisted link works for whoever holds it, so every forward hands over full access. If the video is unreleased, or the client has outside partners in the loop, a password link for each stakeholder group is really worth the extra two minutes.
Which PlayPause plan should I pick if link control is my main concern?
Every plan includes password-protected links, instant link revoking and who-watched analytics, so the core protection is the same everywhere. What changes is lifetime and scale, so Creator at $9 a month gives you 10 members and 30-day links, Agency at $19 gives you 50 members and 90-day links, and Enterprise at $27 gives you 150 members, links that never expire and a custom share domain, while SSO and SAML are coming in February 2027 and aren't available yet. Pricing is flat per workspace rather than per member, so I mostly pick based on how long our review cycles run.
Every plan comes with a 7-day free trial, so pick one on the PlayPause pricing page, make one link for each stakeholder group and send your first password through a different channel, and does that make sense, right, you will feel the difference the first time a forward lands on a locked page.
So yeah. That's my way of saying it.
Saumyajit co-founded PlayPause after years watching review and approval quietly eat creative teams' deadlines. He writes about the workflow side of video, feedback, versioning, and getting to a clean sign-off.
Related resources
Keep reading
Bring your team into one review space
Centralize feedback, lock approvals, and deliver faster, start free today.
Sign Up for Free