Can You Password-Protect a Google Drive Folder? No, but Here Are 5 Ways to Keep Client Photos Private (2026)
Google Drive has no folder passwords. What it does have: sharing with specific people, turning off downloads, and expiring access on some accounts. Five practical ways photographers keep private client photos private, what each one really protects, and which to use for boudoir, family and wedding work.

Short answer
No. Google Drive has no option to put a password on a folder or a link. Drive controls access by person or by link: share with specific people by email, or with ‘Anyone with the link’. To keep client photos private, share only with the client’s email, turn off downloads for proofs, use expiring access if you have an eligible work account, send a password-protected zip, or deliver through a gallery that asks for a password.
It is one of the most searched Google Drive questions among photographers, and the honest answer is short: no, you can't put a password on a Google Drive folder. There is no password field in Drive's sharing dialog, for folders, files or links.
That matters most for the work where privacy matters most: boudoir sessions, newborn and family photos, private events, and anything a client wouldn't want forwarded around a group chat. This guide explains how Drive actually controls access, then walks through five practical ways to keep client photos private, what each one really protects, and which to use for which kind of job.
Table of Contents
- 1. How Google Drive controls access instead
- 2. Share with specific people
- 3. Turn off downloads, printing and copying
- 4. Expiring access (work accounts only)
- 5. Send a password-protected zip
- 6. Deliver through a gallery with a password
- 7. The five options compared
- 8. Which to use for which job
1. How Google Drive controls access instead
Drive doesn't use passwords; it uses who. Every folder has a General access setting, and Google's help describes the options: Restricted, where only people with access can open it, and Anyone with the link, where anyone who has the link can open it without signing in to a Google Account.
Most photographers use "Anyone with the link" because it is the only setting that works for clients without Google accounts. The catch is that the link itself becomes the key: whoever has it can open the folder, including anyone it gets forwarded to. Third-party guides such as Zapier's reach the same conclusion: Drive gives you access control by person or by link, not passwords. So every option below is a way of either narrowing who has the key, or putting a lock in front of it.
2. Share with specific people
How: set the folder's General access to Restricted, then add your client's email address with the Viewer role.
What it protects: only the people you added can open the folder. If the link is forwarded, it won't open for anyone else. This is the most private option Drive offers natively.
The trade-off: every person who needs access must be added individually, so it suits one or two people (a couple, a parent) far better than a family who all want to see the photos. Expect some clients to need help with the access step, and test it before a deadline.
3. Turn off downloads, printing and copying
How: in the Share dialog, open Settings. Google's help explains that owners decide whether viewers and commenters get the option to download, print and copy; leave it unchecked to remove those options.
What it protects: casual saving of full-resolution files. It doesn't stop screenshots, and it doesn't stop the link being forwarded.
When to use it: for proofs and previews before payment, not for final delivery, where your client needs to download. Our guide to watermarking client photos covers the other half of protecting proofs.
4. Expiring access (work accounts only)
How: on an eligible account, add an expiration date next to a person's access in the Share dialog.
The catch: Google's help is explicit that the expiration date feature is only available for eligible work or school accounts, so personal Gmail accounts don't have it. Google's Workspace announcement adds that on folders in shared drives expirations apply to the Viewer role, and can be set on the web and Android but not on iOS. Expiry also applies to people you've shared with, so it works together with option 2 rather than with an open link.
When to use it: if you run your studio on Google Workspace and want a client's access to end automatically after delivery. If you're deciding how long galleries should stay up at all, our guide to how long client galleries should stay online covers the policy side.
5. Send a password-protected zip
How: compress the finished photos into an encrypted zip with a password (tools like 7-Zip on Windows do this), upload the zip to Drive, share the link, and send the password separately, by text message for example.
What it protects: the files themselves. Even if the link is forwarded, nobody can open the photos without the password.
The trade-off: it is a poor client experience. Your client can't preview anything, has to download one large file, and on a phone, opening an encrypted zip can be awkward or impossible without an extra app. It suits a small number of very sensitive files better than a whole gallery.
6. Deliver through a gallery with a password
How: use a client gallery that asks for a password before showing the photos, and send the client the gallery link and the password separately. Our guide to password-protecting client galleries covers choosing and sharing the password well.
What it protects, honestly: it depends on where the photos live.
- A gallery that reads your Google Drive folder can put a password on the gallery link you send, so your client and anyone they forward it to see a password page first. But the Drive folder underneath still has to be shared by link for the gallery to read it, so the password protects the gallery, not the folder. That is a big improvement for everyday privacy, and the right level for most weddings and events.
- A gallery where you upload the photos keeps them off Drive entirely, so the photos are only served to someone who has entered the password. For boudoir and other truly private work, this is the option to choose.
On GalleryLink, both are available on Pro: password protection on any gallery, and direct uploads (10 GB) for the jobs that shouldn't sit in a shared Drive folder at all.
7. The five options compared
| Option | Forwarded link opens? | Client needs | Downloads | Best for |
|---|---|---|---|---|
| Specific people (Restricted) | No | To be added by email | Yes | One or two private recipients |
| Downloads turned off | Yes | Just the link | No (screenshots still possible) | Proofs before payment |
| Expiring access | Only for people you added | An eligible work account on your side | Yes, until expiry | Workspace studios |
| Password-protected zip | Yes, but files stay locked | The password and a way to open zips | Yes, as one file | A few very sensitive files |
| Gallery with a password | To a password page | The password | Yes, photo by photo | Most client work; uploads for private work |
8. Which to use for which job
- Boudoir and intimate sessions: an uploaded gallery with a password, or Restricted sharing to the client's email only. Don't put these in a folder shared by link.
- Newborn and family: a gallery with a password, sent to the parents, with the password sent separately.
- Weddings and events: a gallery with a password works well; the couple can forward the link and password to the people they choose.
- Proofs before payment: turn off downloads, or use watermarked previews.
Whatever you choose, test the link in a private browser window on a phone before you send it, so you see exactly what your client will see. If a link doesn't behave as expected, our guide to Google Drive links that don't work for clients covers the common problems. And if you would like to see how a password-protected gallery looks to a client, you can try a sample gallery in about a minute.