New 250GB Plans LIVE now. See plans →
All posts
March 5, 2026 · Sharing

How to Share a Video Privately (Without Public or Unlisted Links)

Unlisted links are not private. Here is how to share a video privately with passwords, expiring links, domain locks, and watermarks that actually hold.

SM
Saumyajit Maity
Co-founder, PlayPause
Sharing

To share a video privately, send it as a password-protected, expiring link instead of uploading it public or unlisted. Lock the link to specific people or email domains, turn off downloads, and add a watermark if the content is sensitive.

That is the short answer. Most people get this wrong because they trust the "unlisted" button. So let me explain why that fails and what to do instead.

Unlisted Is Not Private

An unlisted link is hidden, not protected. Anyone who has the URL can watch the video.

There is no password. There is no login. The link is the only key, and keys get copied.

Here is how unlisted videos leak in real life. A client forwards the link to three colleagues. Someone pastes it into a shared Slack channel. A browser extension logs the URL. A bot scrapes it.

None of that is malicious. It is just what happens when the only barrier is a hard-to-guess address.

Hidden is not the same as private.

An unlisted link has no password and no access list. If someone has the URL, they are in.

And you have no way to pull it back. You cannot revoke an unlisted link, you cannot see who watched, and you cannot stop a re-share. Once it is out, it is out.

There is a second problem people ignore: ownership. When you upload to a free public platform, you often grant that platform a broad license to use your content. Read the terms. For client work and pre-launch footage, that alone is a reason to keep it off public hosts.

The 5 Ways to Actually Share Privately

Real private sharing means the link does nothing without a credential. Here are the five controls that do the work.

Password-protected links. The viewer needs a password before the player loads. Even if the URL leaks, the video stays locked. Use a strong password and send it on a different channel than the link.

Expiring links. Set the link to die after a date, a number of views, or a set number of hours. This is built for client reviews. Approval comes in, the link expires, the asset is no longer floating around.

Domain-restricted access. Lock viewing to specific email addresses or a whole company domain. A forwarded link is useless to anyone outside that list because they cannot pass the sign-in.

Watermarking. Burn the viewer's email or a session ID onto the frame. People are far less likely to leak a file with their own name stamped across it, and if a screen recording does surface, you can trace the source.

Watermarks matter because no control stops a phone pointed at a screen. You cannot block screen recording outright, so the next best thing is making every viewer accountable. A visible mark turns an anonymous leak into a named one.

Removing public and unlisted exposure. This is the one people skip. If a private copy exists but a public version is still live, you have not secured anything. Take down the unlisted upload.

1Upload to a host that supports access control
2Set a password or restrict to specific emails
3Set the link to expire after the review
4Turn off downloads, turn on a watermark
5Delete any old public or unlisted copy

Pick the Right Method for the Job

You do not need every control on every video. Match the method to the stakes.

A quick internal cut needs a password at most. A pre-launch campaign for a client needs domain locks, expiry, watermarking, and downloads off. Here is how the options compare.

Method What it stops Best for
Public link Nothing Marketing you want everyone to see
Unlisted link Casual discovery only Low-stakes, do not rely on it
Password link Anyone without the password Internal reviews, light protection
Expiring link Access after the deadline Time-boxed client reviews
Domain-restricted Anyone outside your email list Confidential team and client work
Watermarked Anonymous leaking and re-sharing High-stakes, pre-release footage

The rule is simple. The more damage a leak would do, the more layers you stack. For most sensitive work, expiry plus domain restriction plus a watermark covers it.

Review_Cut_v4.mp4In Review
212160p · ProRes
00:34 / 02:18
SR
Sarah 0:34

Frame-accurate note, everyone sees the exact same thing.

In PlayPause, every comment is pinned to the exact frame, no more “which part?” email threads.

Your Private Sharing Checklist

Before you send any video you would not want public, run this list. It takes thirty seconds and saves a lot of pain.

  • Hosted somewhere with real access control, not a public platform
  • Password set, or access limited to named emails or one domain
  • Link set to expire after the review window
  • Downloads disabled so no clean file walks away
  • Watermark on for anything pre-launch or confidential
  • Every old public or unlisted copy deleted

If you cannot tick all six, the video is not as private as you think. The weakest control is the one that matters.

Control Means Nothing Without a Review Workflow

Most private sharing breaks the moment you need feedback. People download the file, mark it up offline, and email it around. Now there are uncontrolled copies everywhere.

The fix is to keep review inside the secure player. Feedback should happen on the protected link, not on a file someone saved to their desktop.

That starts with roles. Not everyone needs the same access. An owner manages the project, a collaborator can comment, a client can review, and a viewer can only watch. Set those roles per project so people see exactly what they should.

The safest copy of your video is the one nobody ever has to download.

Then make the feedback frame-accurate. "Fix the thing near the start" wastes everyone's time. A comment pinned to 00:42 does not. Frame-accurate comments tie every note to an exact timestamp, so your editor knows the precise frame to change.

Version control matters just as much. When you upload v2, the same private link should update. Reviewers always land on the current cut, old versions stay archived, and nobody reviews the wrong file. No "final_v3_REALfinal" chaos.

How PlayPause Does Private Sharing

PlayPause is built so private is the default, not a setting you hunt for. There is no public upload step and no unlisted fallback.

Every share link can be password-protected, set to expire, locked to specific people or email domains, and watermarked. Downloads stay off, so a clean file never leaves the player.

The old way

Unlisted link, no password, no expiry, leaks on the first forward

With PlayPause

Private link with password, expiry, domain lock, and a watermark you control

Review lives inside that same secure link. Reviewers leave frame-accurate comments pinned to the exact timestamp, version history is automatic, and roles keep clients and collaborators in their lane. The protection and the feedback are the same surface, so nothing has to be downloaded to be reviewed.

For teams under stricter rules, the higher tiers add audit trails that log who watched and when, plus single sign-on so access follows your existing identity provider. When someone leaves the company, you cut their access in one place instead of chasing down individual links.

That last point is the difference between feeling private and being private. A shared password protects a link. An access list protects the content, because you can remove one person without touching anyone else.

Pricing is flat and per month. Free is 0 dollars to start. Creator is 9 dollars, Agency is 19 dollars, and Enterprise is 27 dollars for audit trails, SSO, and the strictest controls. You can share privately on day one without paying.

Common Questions

Can people still download my privately shared video? Only if you allow it. Turn downloads off and the video streams inside the player with no clean file to save. A determined viewer can still screen-record, which is exactly why watermarking matters.

What is the difference between a password and a viewer login? A password is one shared secret for everyone with the link. A login ties access to each person's own email, so you can see who watched and revoke one individual without changing anything for the rest.

How do expiring links work for client reviews? You set the link to expire after a date or a number of views. The client reviews during that window, and once it closes the link stops working. The asset is no longer sitting in an inbox weeks later.

Is end-to-end encryption enough on its own? Encryption protects the video in transit and at rest, but it does not decide who gets in. You still need passwords, domain locks, and expiry to control access. Use both.

What about audit trails and compliance? If you work under contracts or regulations, you need a record of who watched what and when. An audit trail gives you that log. Pair it with single sign-on so access is tied to managed accounts you can switch off the day someone leaves.

Private sharing is not one feature. It is a stack of small controls plus a review workflow that never forces a download. Get those right and your video is only ever seen by the people you chose.

SM
Saumyajit Maity
Co-founder, PlayPause

Saumyajit co-founded PlayPause after years watching review and approval quietly eat creative teams' deadlines. He writes about the workflow side of video, feedback, versioning, and getting to a clean sign-off.

Related resources

Keep reading

Bring your team into one review space

Centralize feedback, lock approvals, and deliver faster, start free today.

Sign Up for Free