Available
Password-protected links
Add a simple access gate before the destination.
Interactive product demo
Password-protected links
Example password: demo-2026
What happens
Protect sensitive short links with a password and a branded unlock page. Passwords are securely hashed and never displayed again. Password-protected short links add a simple access gate for previews, client files, private event pages, or limited distributions. They are not a replacement for document-level authorization or end-to-end encryption.
- Branded password interstitial
- Secure password hashing
- Short-lived signed unlock sessions
What this feature does
Add a simple access gate before the destination.
Protect sensitive short links with a password and a branded unlock page. Passwords are securely hashed and never displayed again. Password-protected short links add a simple access gate for previews, client files, private event pages, or limited distributions. They are not a replacement for document-level authorization or end-to-end encryption.
Use this capability when you need more control than a basic short URL provides.
Implementation and operating details
The workflow stays attached to the short link, so you can manage the destination and its rules without replacing the URL already in circulation.
- Branded password interstitial
- Secure password hashing
- Short-lived signed unlock sessions
How it works
Add a link password
Enter your own password or generate a strong one from the link controls.
Share the short URL
Visitors see a branded unlock page instead of the destination.
Grant temporary access
A correct password creates a short-lived signed session before redirecting the visitor.
Operational guide
How DrutoLink processes it
The password is stored as a secure hash. A visitor receives a link-specific, short-lived signed unlock cookie only after successful verification, then continues through the redirect workflow.
Understand the signals, processing order, fallback, and checks that matter before you rely on this capability.
Required inputs and signals
- Configuration input
- Set an access password while creating or editing a protected short link.
- Signals and connected controls
- Expiry controls, campaigns, analytics, and smart links
Decision, fallback, and common mistakes
This protects access through the short link, not the destination when its URL is known elsewhere. Password attempts and unlock-page views are not completed redirect clicks.
This capability is available now. Results still depend on visitor signals, destination availability, campaign setup, and the quality of the traffic being measured.
Practical setup checklist
- 01 Add a link password. Enter your own password or generate a strong one from the link controls.
- 02 Share the short URL. Visitors see a branded unlock page instead of the destination.
- 03 Grant temporary access. A correct password creates a short-lived signed session before redirecting the visitor.
Why teams use it
Measurement and reporting
Review click activity and the relevant link, campaign, audience, or variant breakdowns in DrutoLink analytics. Use consistent UTM parameters when results must also be reconciled with destination-side analytics.
What you can evaluate
Gate private resources without changing the destination · Passwords are hashed and cannot be viewed later · Remove or replace protection at any time
How to interpret results
A redirect click confirms that the link served a destination. It does not by itself prove a signup, purchase, or qualified visit. Compare the same date range and traffic definition before making a decision.
Current status and limitations
This capability is available now. Results still depend on visitor signals, destination availability, campaign setup, and the quality of the traffic being measured.
Important boundary
Use the default destination and documented fallback behavior for cases where a rule cannot be evaluated. Test important links from representative devices and networks before broad distribution.
Can DrutoLink show me the saved password? No. Passwords are stored as secure hashes. You can replace or remove a password, but the original cannot be recovered.
Best use cases
Practical examples
These are common situations where the capability can reduce manual link changes or make reporting easier to understand.
- 01 Private event resources and client previews
- 02 Limited-access documents or downloads
- 03 Internal campaign links shared outside a VPN
- 04 Protect a prelaunch product page or client review link while keeping the destination URL out of the public message.
Is this the right fit?
Choose this feature when
You need one controlled short URL, a repeatable operating workflow, and reporting that stays connected to the link. Gate private resources without changing the destination
Use another approach when
Your requirement depends on a capability marked partial or planned, requires identity-level certainty, or needs conversion attribution that must be measured in the destination product.
Build the complete workflow
Combine this feature with the controls that affect how traffic is routed, organized, and measured.
Terms used on this page
Frequently asked questions
Can DrutoLink show me the saved password?
No. Passwords are stored as secure hashes. You can replace or remove a password, but the original cannot be recovered.
How long does an unlock last?
A successful unlock creates a signed cookie valid for about ten minutes for that specific link.
Are password attempts included in click analytics?
A visitor is counted as a served click only after access is granted and the redirect is completed.
Keep exploring
Smart link controls
One short link with rules for timing, limits, redirects, and access.
Geo-targeting
Send visitors to the right destination, wherever they are.
Device targeting
Send every device to the destination built for it.
A/B testing
Let data pick your best destination.
UTM builder
Clean tracking parameters, every time.
Campaign management
Organize related links and measure the campaign as a whole.
Real-time analytics
Know what every click did.
Live click activity
Watch meaningful clicks arrive as they happen.
Raw click viewer
Inspect the click behind the aggregate.
Link health monitoring
More comingCatch dead links before your audience does.
Link safety and bot filtering
Cleaner analytics and safer destinations by default.
QR codes
More comingFrom link to scan in one click.
Team workspaces
More comingShip links together.
Custom domains
Short links that carry your brand.
Bulk operations
Coming soonCSV import and export for high-volume workflows.
REST API
Coming soonA supported integration API is on the roadmap.
Webhooks
Coming soonEvent delivery for your stack is planned.
Link-in-bio pages
One link, your whole world.
Conversion tracking
Coming soonKnow which links make money.