Access Control5 min read

How Long Should File Transfer Links Stay Active?

A transfer should remain available long enough for its intended recipient, but no longer than the workflow requires. Expiry reduces the window in which a forwarded or forgotten link can be used.

Secure file-transfer path with a clearly controlled expiry window
On this page
01

Match expiry to the delivery purpose

One day works for coordinated confidential delivery. Three days fits active reviews. Seven days is a practical general default. Fourteen days is useful when several stakeholders need time to respond.

Expiry should not be used as the only protection for sensitive files. Add a password, a download allowance, or both when the consequences of forwarding are higher.

WindowGood fitTradeoff
1 dayCoordinated confidential exchangeRecipient must act quickly
3 daysActive project reviewShort follow-up window
7 daysGeneral external deliveryBalanced default
14 daysMulti-person reviewLonger exposure window
02

Manage access after sharing

The server enforces expiry on public views, previews, individual downloads, and ZIP downloads. The sender can also revoke access before the scheduled date from Recent Transfers on the creating device.

Removing a recent-transfer entry from the browser does not revoke the public transfer. Use the explicit Revoke action first when access must end.

Put the workflow into practice

Arrange source documents, select the pages you need, and create one PDF locally in your browser. Review the result before choosing any optional next step.

Try Nexynto Transfer

Frequently asked questions

Clear answers before you merge

Can I extend a transfer after creation?

Not in the current no-database workflow. Create a new transfer with the required availability window.

What happens after expiry?

New access and downloads are blocked, and cleanup removes expired transfer objects according to the configured lifecycle.

Related tools

Continue your document workflow