When should a photographer password-protect a proofing gallery instead of using a private link?

What a private link actually protects

A private link is a long, unguessable web address that is not listed anywhere or indexed by search engines. Anyone who has the exact address can open the gallery; anyone who does not cannot find it. For the majority of portrait and family work this is enough. The images are not secret, the client is the only person who receives the link, and the worst realistic outcome is that a grandparent gets forwarded the address and sees the pictures early.

The weakness of a private link is that it travels. Once the client pastes it into a group chat, it is effectively open to everyone in that chat, and you have no way to know who has it. It also cannot be revoked for one person without being revoked for everyone. If you would be uncomfortable with the gallery being seen by whoever the client happens to forward it to, a private link alone is not the right tool.

Keep reading: Streamlining Client Proofing After a Shoot, Why Image Numbers Over Email Fail, Setting Client Expectations for Selections. See how Framepickr helps you photographer client proofing galleries with print-order markup.

When a password earns its friction

A password adds a second thing the viewer must know, which means a forwarded link is useless on its own. That matters for a few kinds of work: images of minors where the school or league has privacy rules, boudoir and other sensitive sessions, corporate and product work under embargo, and any shoot where the subject explicitly asked that the images stay tightly controlled. In those cases the password is not a nuisance, it is part of the professional service the client is paying for. Related: Streamlining Client Proofing After a Shoot

Passwords also make sense when the gallery includes something you do not want casually shared: pricing for print packages, unedited proofs that will look very different from the finished work, or images from a wedding the couple has not yet announced. A password signals to the client that this is private material, and people tend to treat a locked gallery more carefully than an open link. Related: How Many Proofs to Show a Client

The real cost of passwords is support

Every photographer who has used password-protected galleries knows the email: "I can't get into my photos." The password was mistyped, autocorrected, sent to a spouse who lost the message, or pasted with a trailing space. Each of these takes a few minutes of your time and, more importantly, interrupts the client's excitement at exactly the wrong moment. Multiply by a busy season and it becomes a genuine drag on your week.

You can reduce this considerably. Use simple, readable passwords rather than random strings, since the point is to stop casual forwarding, not to resist a determined attacker. Put the password in the same message as the link, and in the gallery's email reminder as well. If your proofing platform supports per-client email login or a magic link instead of a shared password, that usually removes the problem entirely while keeping the access control. Related: Why Image Numbers Over Email Fail

A simple decision rule

Default to a private link for ordinary portrait, family, senior, and pet work where the images are pleasant and the client would be happy for relatives to see them. Switch to a password, or better, individual client logins, whenever there are minors under institutional rules, sensitive content, commercial confidentiality, or a client request. Write this rule down so you apply it consistently instead of deciding gallery by gallery. Related: Protecting Your Images While Sharing Them

Whichever you choose, pair it with the controls that actually stop misuse: disable downloads on proofs, watermark if the client base warrants it, and set an expiration on the gallery. Access control decides who can open the door; those other settings decide what they can walk out with. A password on a gallery with unrestricted full-resolution downloads is security theater.