How to Password Protect a Link (and Gate It With Expiry or Click Limits)

Last updated: July 2026

To password protect a link, create a short link, turn on the password option, and set a passphrase before you share it. Anyone who opens the link sees a password prompt first — only people who enter the correct passphrase are redirected to the real destination. Everyone else is stopped at the gate.

That single step turns an ordinary short link into a password protected URL you can hand out publicly while keeping the destination private. Below is exactly how to set one up, when to combine it with an expiry date or a click cap, what it costs, and how the password is stored.

What does it mean to password protect a link?

Password protecting a link means putting a passphrase in front of the destination so the URL alone isn't enough to reach it. You share a normal-looking short link — like mumenlabs.com/s/preview — but when someone opens it, they hit a password screen instead of the target page. Enter the right passphrase and the link redirects; get it wrong and nothing loads.

This is different from making a link secret by keeping it obscure. A random link can still be forwarded, indexed, or guessed. A private share link with a password stays gated no matter how many people see the URL, because access depends on the passphrase, not on who happens to have the link.

People use a password protected URL to:

• Share gated content — a lead magnet, a members-only guide, or an early-access page.
• Send private docs to a specific person or team without exposing them publicly.
• Release a limited preview of a product, portfolio, or draft to a chosen audience.
• Protect a destination that would otherwise be scraped or shared beyond its intended reader.

How to password protect a link

Setting up a password protected short link takes about a minute. On the MumenLabs URL Shortener, here's the full flow:

1. Paste your long URL. Drop in the http or https address you want to gate — a document, a landing page, a file, or any web link.
2. Open the Power options. Password protection is a Power feature, alongside expiry dates, click limits, and smart targeting. Toggle it on when you create the link.
3. Set your passphrase. Type the password people will need to enter. Choose something you can share separately from the link itself — over a message, an email, or in person.
4. (Optional) Add an expiry or click limit. In the same step you can set the link to expire on a date or stop after a fixed number of clicks. More on combining these below.
5. Create the link and share it. You get a clean mumenlabs.com/s/ short link. Send the link through one channel and the password through another so neither is useful without the other.
6. Point people to /preview if they're unsure. Anyone can append /preview to the link to see where it leads — the destination and safety status — without being redirected, which builds trust before they enter a password.

That's it. From then on, every visit to that link shows the password gate first, and only correct entries pass through to your destination.

Can I make the link expire or cap clicks too?

Yes — and combining them is where a gated link gets genuinely powerful. Password protection, an expiring link, and a click-limit link are all part of the same Power link, so you can stack them on a single URL:

• Password + expiry — great for time-boxed access. Share a private preview that requires a passphrase and stops working after your launch window closes. Even someone who has the password can't open it once the date passes.
• Password + click limit — great for limited releases. Cap the link at, say, 50 clicks so only the first fifty people who know the passphrase can get in, then the link closes itself. Perfect for a limited beta or an exclusive offer.
• All three together — a passphrase-gated link that also expires on a date and caps total clicks, for the tightest control over who reaches the destination and when.

A click-limit link counts each successful redirect and shuts off once it hits your number, so you never have to remember to disable it manually. An expiring link does the same on a schedule. If you want the full picture on how link expiry works — and why a standard MumenLabs link never expires unless you tell it to — see do short links expire.

When should you gate a link instead of using a plain one?

Not every link needs a password. Use a gated link when the destination is sensitive, exclusive, or time-limited — and a plain short link when you just want something clean and trackable.

Reach for a password protected URL when you want to gate a link to a specific audience: private client documents, paid or members-only content, unreleased work you're sharing for feedback, or anything you'd rather not have forwarded freely. Reach for an expiry or click cap when access should be temporary or scarce — a flash offer, a limited beta, or a preview that shouldn't outlive its moment.

For everyday links — a bio link, a campaign URL, a printed QR destination — a standard link is the better fit. You still get full click analytics for free, and you can add a readable custom back-half so people trust the link before they tap. If a memorable, branded slug is what you're after, see how to create a custom short link. And if you mostly want to know who's clicking and from where, the guide to a URL shortener with click analytics covers the free reporting on every link.

How much does it cost to password protect a link?

Password protection is a Power link feature, which costs a flat 5 credits ($0.25) for that link — one price whether you use just the password or stack it with an expiry date, a click limit, and smart targeting. There's no subscription and no monthly cap. You pay once, for that link, and it stays live.

For comparison, a standard short link is completely free — including click analytics, a QR code, and a re-pointable destination — and a custom back-half (a readable slug) is 2 credits ($0.10). Credits come from your shared MumenLabs wallet at $0.05 each, and editing, pausing, viewing analytics, and deleting links are always free. So you only spend the 5 credits when you actually need the gate, and every other feature around the link stays free.

Is the password stored securely?

Yes. Passwords on a gated link are stored hashed with scrypt, a deliberately slow, memory-hard hashing function built to resist brute-force attacks — the plain-text passphrase is never saved. When someone enters a password, it's hashed and compared against the stored hash, so even in the unlikely event of a data exposure, the original passphrase isn't sitting there to be read.

A couple of practical habits make a gated link even safer:

• Send the link and the password through different channels. Post or email the link; share the passphrase in a separate message. Neither is useful alone.
• Use expiry or click limits for anything truly time-sensitive. A password controls who gets in; an expiring link or click cap controls how long and how many, which together shrink the window for misuse.

Frequently asked questions

How do I password protect a link?

Create a short link, turn on the password Power option, and set a passphrase. Anyone who opens the link is shown a password prompt and only reaches the destination if they enter the correct passphrase. On the MumenLabs URL Shortener it's a single toggle when you create the link, and you can share it in about a minute.

Can I also make the link expire or cap the number of clicks?

Yes. Password protection, an expiring link, and a click-limit link are all part of the same Power link, so you can combine them on one URL. Gate a link with a passphrase and have it expire on a date or stop after a set number of clicks — ideal for private previews, time-boxed promos, and limited releases.

How much does a password protected link cost?

A Power link — which includes password protection, expiry, and click limits — is a flat 5 credits ($0.25) for that link, with no subscription. Standard short links with analytics are free, and a custom back-half is 2 credits ($0.10). You only pay the 5 credits when you need the gate.

Is the password stored securely?

Yes. Passwords are stored hashed using scrypt, a slow, brute-force-resistant hashing function, so the plain-text passphrase is never saved. The system compares hashes when someone enters a password. For extra safety, share the link and the password through separate channels.

Can people check where a link goes before entering a password?

Yes. Append /preview to any short link to see the destination and its safety status without being redirected. This lets a recipient confirm a private share link is legitimate before they type a passphrase, which builds trust and cuts down on abandoned clicks.

Lock your next link behind a password

A password protected URL lets you share publicly and keep the destination private — hand out a clean short link, keep the passphrase separate, and optionally stack an expiry date or click cap for tighter control. It's a flat 5 credits per link, the passphrase is hashed with scrypt, and a /preview lets recipients confirm where they're headed first.

Ready to gate your content? Learn how to password protect a link with the MumenLabs URL Shortener and set up a private, expiring, or click-limited link in minutes.