Sharing files from OneDrive carefully (personal and family)

Image: Microsoft OneDrive brand artwork (Microsoft).

OneDrive makes sharing easy. Tap Share, copy a link, paste it into a group chat. That convenience is why tax PDFs, passport scans, and kids’ school forms still travel as open links months later. This guide is for personal Microsoft accounts and Microsoft 365 Family / Personal OneDrive. It is not a tenant admin checklist for a company SharePoint farm.

Microsoft documents the consumer sharing model in Share files and folders in Microsoft OneDrive. The labels below match what most home users see in the OneDrive website and File Explorer.

Know the link types before you click Copy

When you share, OneDrive usually offers choices like these (names vary slightly by app and plan):

Link style	Who gets in	Good for	Risk
Anyone	Anyone who has the URL (often without a Microsoft sign-in)	Low-sensitivity files you truly mean to publish for a short time	Link can be forwarded forever until you stop it
Specific people	Only the email addresses you list, after they sign in	Private docs, IDs, medical or school paperwork	Slightly more friction; much better control
People with existing access	People who already could open the item	Resending a path without widening access	Does not grant new people access

Default to Specific people for anything you would not tape to a storefront window. Use Anyone only when you accept that the URL is a public handle.

With a Microsoft 365 personal or family subscription, Link settings can add an expiration date and a password on many Anyone links. Microsoft walks through that in Use expiration dates and passwords. Send the password in a separate message. When the date passes, create a new link if someone still needs the file. Availability can differ by plan and client, so if you do not see the toggles, stay on Specific people instead.

Family sharing is not the same as a public link

Microsoft 365 Family organizes subscriptions and storage for household members. That is not a reason to drop every private folder into an Anyone link for relatives.

Better patterns:

• Add the relative as a specific person on the folder they need
• Or keep a dedicated shared folder for “family logistics” and leave tax/ID folders unshared
• Review Shared and Shared with you views in OneDrive periodically so old wedding-vendor folders do not linger

If you only need someone to download a single PDF once, a specific-people link with clear intent beats a permanent Anyone link in a group chat.

A careful share, step by step

1. Upload or locate the file in OneDrive (website or sync folder). Avoid emailing the only copy as an unprotected attachment when a controlled link will do.
2. Click Share. Pick Specific people for private material. Enter the exact email addresses.
3. Choose Can view vs Can edit. View is enough for “please download this form.” Edit is for co-authoring a list you both maintain. Editing is often on by default, so turn it off when the recipient only needs a copy.
4. If you must use Anyone: open Link settings, set expiration (and a password when offered), use the shortest window that still works, and paste the link only in a channel you trust.
5. Tell the recipient what you shared. People click the wrong link when five live in the same chat.
6. After the job is done: open the file’s Manage access / Shared details and Remove links you no longer need.

Cleanup day (quarterly is enough)

• Open OneDrive on the web → Shared → review items you shared
• Remove Anyone links that were for a one-time contractor or school deadline
• Check that ex-partners, old roommates, and forgotten group chats are no longer on specific-people lists
• Remember recycle bin and version history are short safety nets, not a sharing policy. Pair this with cloud sync is not a backup so a bad share or wipe does not take your only copy

Do not do that

• Do not put passport scans, SSNs, or medical PDFs behind an Anyone link “just this once” without expiry.
• Do not grant Can edit when Can view would finish the task.
• Do not leave contractor links active after the kitchen remodel ends.
• Do not assume a link in a “private” Discord or SMS thread stays private. Threads get screenshots and forwards.
• Do not confuse OneDrive Family subscription seats with automatic permission to every folder you own.

Bottom line

Personal OneDrive sharing is safe when you pick the narrowest link that still works, prefer specific people over Anyone, expire public links, and revoke access when the reason goes away. Treat Share like handing someone a key. Most household files need a named recipient and a view-only link, not a permanent public URL in a group chat.