Password-protecting a link
Last updated 16 August 2026
A password sits between a project’s two other access modes, public and invite-only (see share links and expiry). Anyone with the link and the password can view and install — no need to add them as a tester one by one. It’s a Pro feature.
Setting a password
Open the project dashboard in a browser
Any manager can do this.
Switch the link's access mode to Password
The setting sits with the project’s other share options.
Choose a password, 4 to 128 characters
Setting a new one replaces the old one immediately — there’s no grace period where both work. Clearing it switches the link back to public.
Web dashboard only
There’s no equivalent screen in the mobile app yet, so set or change a link’s password from a browser.
What a tester sees
Opening the link shows a password prompt instead of the app details. Get it right and the page unlocks for that visit; get it wrong and it simply asks again.
How it’s protected
Attempts are capped at 10 per visitor every 15 minutes — well past what a real tester will ever hit, but enough to make brute-forcing the link pointless. The password itself is never stored or transmitted in a recoverable form: only a salted hash lives on the server, checked without ever revealing the original value.
Password or invite-only?
Use a passwordwhen you want a low-friction link you can drop in a group chat or a doc without collecting everyone’s email first.
Use invite-onlywhen you need to know exactly who has access and be able to revoke one person without disrupting everyone else — a shared password can’t be taken away from one person without rotating it for the whole group.
Ready to try it?
Drop an .apk or .ipa and get a shareable install link in seconds.