Creating Password-Protected Share Links & Expirations

When sharing sensitive corporate documents, client deliverables, or media archives with external partners, you do not need to make your private storage buckets public or force recipients to create a Nyota account.

Nyota Drive allows you to generate secure, tokenized Share Links protected by mandatory passwords, expiration timestamps, and download limits.

1. How Share Links Work Under the Hood

When you generate a share link in Nyota Drive, the backend creates an isolated security token (drive.shares) that locks access behind cryptographic verification:

1. SHARE LINK GENERATION (Admin Console / API)
    User selects file/folder -> Configures:
    - Password: Hashed with salted bcrypt (never stored in plaintext).
    - Expiration: Strict timestamp (e.g. 7 days).
    - Max Downloads: Optional cap (e.g. 5 downloads).
    -> System generates unique URL: https://drive.nyotaimara.com/share/[token]
                         │
                         ▼
 2. RECIPIENT ACCESS & VERIFICATION
    External recipient opens link -> Browser prompts for password
    -> Backend verifies bcrypt hash -> Checks expiration & download limits
    -> Emits short-lived (5-minute) pre-signed S3 stream URL.

2. Step-by-Step: Creating a Secure Share Link in Web Console

1. Log in to the Nyota Drive Console.
2. Browse to the file or folder you wish to share.
3. Click the three dots menu (...) on the file row and select "Share".
4. In the sharing modal:
5. • Enable Password Protection: Toggle on "Require Password" and enter a secure password.
   • Set Expiration Date: Choose a validity window (e.g., 24 Hours, 7 Days, 30 Days, or a Custom Date).
   • Set Download Limit (Optional): Enter a maximum download count (e.g., allow only 3 downloads).
5. Click "Generate Share Link".
6. Copy the generated URL (https://drive.nyotaimara.com/share/sh_xxxx) and share it with your recipient along with the password via a secure channel (e.g., WhatsApp, Signal, or email).

3. Programmatic API Integration (REST Endpoint)

Developers can automate file sharing directly from their application backend:

Read Developer Docs at https://docs.nyotaimara.com/docs/2-nyota-drive

4. How to Revoke or Edit an Active Share Link

If you need to extend an expired link or instantly terminate access to a shared file:

1. Open drive.nyotaimara.com and navigate to Shares in the left sidebar.
2. Locate the active share token.
3. To Extend Access: Click "Edit" to adjust the expiration date or increase the download count.
4. To Revoke Access Immediately: Click "Revoke Link". This instantly invalidates the token across all global edge nodes, returning a 404 Link Inactive error to anyone attempting to access it.

5. Common Pitfalls & How to Troubleshoot

Pitfall A: "Recipient sees 'This share link has expired or reached its limit'."

• The Cause: The link passed its configured calendar expiration date or reached its maximum download allowance.
• The Resolution: Go to Shares on drive.nyotaimara.com, locate the link, and click "Extend Validity".

Pitfall B: "I forgot the password I set for the share link."

• The Cause: For security, passwords are encrypted using one-way bcrypt hashing and cannot be retrieved.
• The Resolution: Edit the share settings in the dashboard to type a new password, or revoke the old link and generate a fresh share URL.

Related Support Guides & Links

• Getting Started with Zero-Egress S3 Storage
• Public vs. Private Buckets & CDN Edge Caching
• Direct Nyota Drive Web Console