Download and Sharing

External recipients currently use confirmed-email PIN verification or an explicitly created anyone-with-link share. Choose the narrower path when access should be tied to a named recipient.

Set an expiry for time-limited access. Revoke or reissue a share when its recipient or purpose changes.

Revocation prevents future access through the revoked share. It cannot recall files already downloaded or copied. External sharing does not currently have feature parity with the optional member file-payload E2EE path.