Dropbox status: access issues and outage reports

Problems in the last 24 hours

The graph below depicts the number of Dropbox reports received over the last 24 hours by time of day. When the number of reports exceeds the baseline, represented by the red line, an outage is determined.

Most Reported Problems

The following are the most recent problems reported by Dropbox users through our website.

• Errors (60%)
• Sign in (20%)
• Website Down (20%)

Live Outage Map

The most recent Dropbox outage reports came from the following cities:

City	Problem Type	Report Time
Nottingham	Errors	17 days ago
Guayaquil	Website Down	17 days ago
Flumet	Errors	28 days ago
Irapuato	Errors	30 days ago
Bournemouth	Sign in	3 months ago
Paramaribo	Errors	4 months ago

Full Outage Map

Community Discussion

Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.

Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.

Dropbox Issues Reports

Latest outage, problems and issue reports in social media:

• 
  Ryan Babbs (@buckybabbs) reported 11 seconds ago

  Hello @Dropbox, Just this week I have decided to switch cloud service from Google Drive to you and less than 1 week I'm having an issue. I run a wedding film business and am trying to move the same 200GB file to two separate editors for two separate kind of films and one of them is encountering a "link temporarily disabled" message. I tried to research online and made a new folder and copied over the original folders contents and cannot share that either as it says I've exceeded bandwidth limits. This is maddening as I thought I'd picked the good plan (3TB) and was all set. Please advise asap as I need these files in my editors hands stat.

• 
  M.Ellis (@MEllisPhotograp) reported 45 seconds ago

  @DropboxSupport ive tried mircosoft edge but problem is stil present... do you think i might have been hacked or had bad file ?

• 
  Kirk Patrick Miller (@Chaos2Cured) reported 2 minutes ago

  @Ultrademic @Seltaa_ @GoogleAI You’re doing something like Suno? I have something for you. All my Dropbox links are broken. I have a PDF that will help. And yes… I miss the real Ai music. •

• 
  Andree Chao (@AndreeChao) reported 5 minutes ago

  @DropboxSupport Can not sign in it’s broken.

• 
  Abhishek Singh (@0xlelouch_) reported 12 minutes ago

  Asked: design Dropbox-style file sync. 1) Clarify requirements - Devices: desktop + mobile, multiple per user - Semantics: eventual consistency, conflict handling, offline edits, rename/move - Scale targets: #files/user, max file size, p95 sync latency, bandwidth caps - Security: per-user auth, sharing model, at-rest + in-transit encryption 2) Core APIs + data model - UploadChunk(sessionId, part#, bytes), CommitUpload(sessionId, fileHash, path, mtime) - ListChanges(cursor) -> {ops}, Ack(cursor) - Download(path, version) with range support Tables: - File(id, ownerId, logicalPath, currentVersion, deleted) - Version(fileId, versionId, contentHash, size, createdAt) - Block(contentHash, refCount, location) - DeviceCursor(deviceId, lastSeq) - OpLog(seq, userId, type, path, fromPath, versionId) 3) Architecture - Client watcher computes hashes, does chunked upload to object store (S3/GCS) - Metadata service is the source of truth for paths, versions, ACLs - Change log per user (or per share) drives fanout to devices - Long-poll/WebSocket to push invalidations; client pulls deltas via cursor - Dedup by contentHash; store blocks, assemble manifests per version 4) Scaling - Partition metadata by userId; keep OpLog append-only with monotonically increasing seq - Cache hot metadata (folder listings, latest versions) in Redis - Use CDN for downloads; throttle uploads per device; resumable sessions - Background GC for unreferenced blocks using refCount + tombstones 5) Tradeoffs interviewers look for - Push vs pull: push invalidation, pull data is simpler and cheaper than pushing bytes - Strong vs eventual: strong per-file commit, eventual across devices is fine - Rename as metadata op; avoid copying data, but watch for path conflicts - Dedup saves storage, costs CPU and can leak info unless scoped per user/tenant 6) Failure cases - Offline edit + concurrent edit: create conflicted copy or keep both versions with merge UI - Out-of-order ops: apply by seq, idempotent commits, retry-safe APIs - Partial upload: orphaned chunks; TTL cleanup; commit is the only visibility point - Device clock skew: never trust mtime for ordering; server seq is ordering - Network *****: exponential backoff, cursor-based replay, checksums on download to detect corruption

• 
  Shadow_Vortex_2025 (@Shad0wV0rtex) reported 13 minutes ago

  @FrancoisOlwage @bot I ran into a similar issue just trying to connect Dropbox, ClickUp, and Google Sheets, and all my tokens were already gone.

• 
  David Simpkins (@DavidSimpkins88) reported 15 minutes ago

  URGENT!!! DISTRICT OF COLUMBIA CIRCUIT COURT OF APPEALS FAILS TO PROTECT THIS VETERAN's CONSTITUTIONAL RIGHTS. MY HOME SECURITY SYSTEM AND PHONES HAVE BEEN TAKEN OVER AND I AM PREVENTED FROM SEEING ANYTHING OUTSIDE MY HOME BECAUSE OF THE CURRENT ACTIVE ATTACKS ON MY PHONES AND SECURITY SYSTEM IN DIRECT VIOLATION OF TN AND FEDERAL LAW AND NO ONE IS STOPPING THEM. LINK TO PETITION FOR WRIT OF MANDAMUS: I went to get the link from Dropbox and my Dropbox appears to have been wiped out. TO THE D.C. APPELLATE CIRCUIT COURT TO REQUEST AN IMMEDIATE RULING ON A TRO TO PROTECT THE APPELLANTS. This subject is about the District of Columbia Circuit Court of Appeals has not issued a standard Stay of Proceedings to the State of TN for their malicious prosecution. By not doing so, they have left this Veteran and his Wife open to criminal attacks by unlawful Law Enforcement of the State of TN. Further the Appellate Court has allowed non-stop violations of the Appellants home computer, cell phones, A/C Units, Security System and any all other WiFi devices. And to this day the illegal cameras placed in the Appellants home have never been removed after the Local Police Department notified this Appellant that there were hidden camera's in his home. Further, the FBI, DOJ, OIG, D.C. US Attorney's Office and especially the Appellate Court have all been notified of the targeting and 24/7 harassment by allegedly unlawful Agents of more than one of our Alphabet Agencies, to include the FBI and DISA. FBI Director Patel has to know about this situation but has done nothing to stop the corruption in the State of TN and has not protected this Veteran and his Wife. We made it clear that on the night of February 18th, 2026, that 5 people in Police Uniforms had keys to this Appellant's home and attempted to unlock the locks and enter the home both at the front door and at the Garage Pedestrian Door. They never once made any statements or comments nor explained why they were there. They did not show any warrants for arrest or search. When they knew they could not get in with out breaking things, they left approximately 15 minutes later. I had called my Wife and let her know. I am facing the same potential attacks again even though when the State of TN conceding by defaulting by not filing a response Brief. They were effectively agreeing that everything stated in the Appellant Brief was accurate and that they could not contest it. That makes all the acts committed by all Law enforcement Four-Hundred and Ninety-Seven (497) Constitutional Rights Violations are valid. Further, in order to access the Security System and the Display, they have to be within 350ft of our home. Because there is no WiFi or Bluetooth installed in the Security System or the Display. Which means they are in close proximity of this Appellants property. Three (3) Emergency Motions have been filed with the D.C. Appellate Court on three separate dates to no avail. The D.C. Appellate Circuit Court has failed to issue a TRO to Stay the TN State malicious prosecution. And left this Appellant, Veteran to suffer the vices and current active ongoing criminal activities by the State of TN against this Appellant as he types in this post. This could include a potential unlawful arrest and incarceration again because the D.C. Appellate Court has not issued a TRO or a Protective Order to Protect the Appellants. That in and of itself is a direct Constitutional Rights Violation now by the very Appellate Court who has allowed further criminal activities to promulgate even further to allow harm and injury. The corruption appears to be rampant in our US Court Systems.

• 
  asta (@astadiego) reported 16 minutes ago

  We’ve been paying customers for years and Dropbox is completely down on our end, bringing our work to a halt. Are you currently experiencing an outage? What’s the ETA for a fix? @DropboxSupport

• 
  kayden (@codependentyaoi) reported 17 minutes ago

  @unprojection i think the issue was the site i was uploading my art to to link on ao3, i was using dropbox and it wouldn't link and then i saw some ppl on reddit say dropbox didnt work for them either, but i was able to find another website thankfully :]

• 
  Nikki Gist (@NikkiNic9384) reported 17 minutes ago

  @Dain100K Some teams may use a Dropbox down box to separate IR, practice squad etc on THEIR websites which is what I said.

• 
  glitterandspit (@Glitterandspit) reported 18 minutes ago

  Dropbox down. Computer updating. I have a free day I suppose.

• 
  Eyal Benishti (@eyalbd1) reported 24 minutes ago

  @BleepinComputer Password and 2FA were both fine here. Neither was in the path, because Dropbox trusted Lenovo's word that the attacker owned the email address. Every federated login is a bet that somebody else's email verification is not broken.

• 
  Petty IT Guy (@pettyITguy) reported 24 minutes ago

  Our CEO told me the Wi-Fi in his office was “basically unusable.” He said this in front of the entire executive team. So naturally it became the highest-priority infrastructure incident in the company. I tested his connection. 940 Mbps down. Perfect signal strength. Zero packet loss. I asked what specifically wasn't working. He said YouTube kept buffering during lunch. I opened his laptop. He had 71 Chrome tabs open. Three abandoned Zoom meetings were still running in the background. Dropbox was syncing 84 gigabytes. Google Drive was uploading a 4K video. He had not restarted the machine in 47 days. I could have explained this. Instead I told him our executive wireless architecture had reached end-of-life. He asked what it would cost to fix. I said I would need to scope it. He told me not to waste time and approved an $84,000 wireless modernization project before I finished the sentence. We replaced 38 access points. Installed a new wireless controller. Rewired two conference rooms. Brought in a consultant. His YouTube still buffered. I walked into his office, closed 68 Chrome tabs, killed the abandoned Zoom processes, and restarted the laptop. YouTube loaded instantly. He smiled. “Now that's more like it.” 20 minutes later he emailed my boss praising me for successfully completing the company's wireless transformation ahead of schedule. I received a spot bonus. Sometimes infrastructure modernization is just restarting a MacBook for an inept executive.

• 
  Craylor (@craylor) reported 27 minutes ago

  Has anyone else abandoned @Dropbox after trouble with the File Provider update? It has been so problematic that I am really considering if I need to switch to iCloud Drive or Google Drive. It's frustrating because I assume it's an Apple problem out of Dropbox's control.

• 
  Founder Tribune (@Founder_Tribune) reported 35 minutes ago

  Drew Houston, founder of Dropbox, on the day the scoreboard gets switched off: For your entire life, the water has come out of one hose. Then, as he put it to MIT's graduating class: "Today, one valve shuts off and now your job is to go out and find a new hose." His hose was Dropbox. Yes, building the company was "the most exciting and interesting and fulfilling experience of my life." But he immediately flagged the half nobody hears: "What you probably don't know, and what I haven't really talked about, this has also been the most painful and humiliating and frustrating experience, too." Not hard. Humiliating. He said he could look back over the years and not even count the number of things that had gone wrong. Then: it doesn't matter. Nobody has a 4.0 in real life. Once you're done with school, Houston said, the whole idea of a GPA just goes away. Bill Gates's first company made software for traffic lights. Steve Jobs's first company made plastic whistles that let you make free phone calls. Neither was successful, and in Houston's words, "it's hard to imagine these guys were too worried about it." Here's why that lands harder than the usual fail-fast sermon: A GPA is an average, every error permanent, weighted, dragged forward forever. It rewards never being wrong. What comes after is a maximum. The misses are discarded. Only the peak is scored. Most people struggle after graduation because they keep playing an average game inside a maximum game. "From now on, failure doesn't matter. You only have to be right once."

• 
  Craig O'Shea (@craig_os) reported 40 minutes ago

  @DropboxSupport major issue with your services right now.

• 
  Mikemira (@storiesbyohama) reported 45 minutes ago

  Twitter did not explode online first. It exploded in a hallway. In 2007, Twitter was still small. Most people online did not care. So the team did not try to shout at the whole internet. They went to SXSW. They put two big screens in the corridor. People at the event sent a text. That text showed up on the wall in front of everyone. One person posted. Ten people saw it. Then those ten posted too. That is how usage jumped. Not from a giant ad. From one room full of the right people. This is the growth lesson most founders miss. You do not need the whole market on day one. You need one place where your first users already stand. A campus. A conference. A WhatsApp group. A Discord. One street. One event. Dropbox did this on Hacker News. Tinder did this at campus parties. Airbnb did this when hotels ran out of rooms. If signups are slow, stop spraying ads everywhere. Find the one room. Make the product visible there. Let people watch other people use it. That is how early growth actually starts. I'm Miracle Ohama, a Growth Marketer helping B2B SaaS & tech companies find and fix revenue leaks across their funnel, I fix Growth Funnels & build real experiments that increase ARR.

• 
  Rituraj (@RituWithAI) reported 45 minutes ago

  🚨 Someone built a tool that checks if your email is registered on 120+ sites — without the sites ever knowing someone checked. No notifications sent. No login attempts logged. No alerts triggered. Silent. Invisible. Complete. It's called Holehe. 16,800 GitHub stars. And the technique behind it is what makes it different from every other email OSINT tool. Here's how most email checkers work — and why they fail. Standard approach: try to log in with the email and a fake password. If the error says "wrong password" — the account exists. If it says "account not found" — it doesn't. Problem: every login attempt gets logged. Every failed attempt triggers security alerts on accounts with 2FA. Some platforms lock accounts after repeated failed attempts. The target knows someone was checking. Holehe never attempts a login. Instead it uses the "forgot password" flow — the password reset mechanism that every platform exposes publicly. When you enter an email on a forgot password page, the platform has to check whether that email exists in its database. It tells you: "we sent a reset link" or "no account found." Holehe reads that response. Gets the answer. Never touches the login flow. Never triggers a security alert. Never logs an access attempt against the account. The platform confirms whether the email exists. The account owner never finds out anyone asked. Here's what 120+ platforms looks like in practice. Social media: Twitter, Instagram, Facebook, TikTok, Pinterest, Tumblr, Reddit. Professional: LinkedIn, GitHub, Freelancer, Fiverr. Dating: Tinder, Bumble, OkCupid, Badoo, Happn. Entertainment: Spotify, Netflix, Twitch, Steam, Epic Games, Deezer. Shopping: Amazon, eBay, Etsy, Zalando, AliExpress. Services: Airbnb, Uber, PayPal, Dropbox, Adobe. And 90+ more. Every registration checked silently. Here's the use case that makes people share this. Run your own email address. See every platform that comes back positive. Then run an email address you gave to a company that claimed they'd never share it. See if it's registered on data broker sites and marketing platforms you never signed up for. See where your email has been sold or leaked to. Here's what investigators actually use it for. Journalists verifying whether a source's claimed identity matches their digital footprint. Security researchers auditing their own exposure before a public disclosure. HR teams verifying whether candidate profiles match claimed backgrounds. And the obvious: anyone who needs to know whether a specific email address belongs to a real active person — without alerting that person. Here's the wildest part. It runs async — all 120+ platforms checked simultaneously. Results in seconds. And it exports clean JSON or CSV for integration into larger OSINT pipelines. Pair it with Blackbird (which takes the confirmed email and finds linked profiles), Sherlock (which takes usernames found in those profiles and searches 400+ platforms), and Maigret (which builds the full dossier) — and you have a complete four-tool OSINT pipeline from a single email address. One command to instal. Run it on your own email first. 16.8K GitHub stars. 1.7K forks. MIT License. 100% Open Source. GitHub link in the comments 👇

• 
  FarhanX_AI (@FarhanBuildsAI) reported 45 minutes ago

  SETTING #1: Startup Apps Nobody Asked For What it does: Every time you install a new program, it quietly adds itself to a list of apps that launch the second Windows boots, whether you use it daily or once a year. Why it kills performance: Your laptop isn't just starting Windows when you power it on. It's simultaneously launching Spotify, Steam, Adobe updaters, Dropbox, Zoom, and a dozen other programs all fighting for the same limited CPU and RAM at once. How to fix it: Ctrl + Shift + Esc to open Task Manager → Startup apps tab. Disable everything except your antivirus and anything you genuinely open every single day. The technician found 19 apps launching automatically on her laptop. She recognized maybe 6 of them.

• 
  Alvin (@Alvin1492840) reported 46 minutes ago

  Kill the startup apps that have been draining your battery since day one. She opened System Settings → General → Login Items & Extensions. 14 apps were set to launch automatically every time he turned on his Mac. Spotify. Zoom. Adobe Creative Cloud. Google Drive. Microsoft Teams. OneDrive. Dropbox. A VPN he used once. A screenshot tool he forgot about. A calendar widget. And 4 more he didn't recognize. Every one of them was running in the background 24/7 consuming RAM, CPU cycles, and battery life whether he was using them or not. She said: "You turn on your Mac and within 30 seconds, 14 apps are fighting for resources before you've even opened your first document. Your fan spins up because your CPU is processing a traffic jam of apps you're not using. Your battery dies by 2pm because half your power is going to background processes you don't see." She removed 11 of the 14. Kept only the ones he actually needed at startup. The Mac booted in half the time. The fan stayed quiet. The battery lasted 3 extra hours. She said: "Check this list right now. If you see apps you don't use daily, remove them. They've been silently eating your Mac alive since the day you installed them."

• 
  Lando, the Chef (@_Lando7763) reported 47 minutes ago

  @PhyxicxGaming Thanks. And unfortunately it's even worse than that because it's technically "shared housing;" the place was already a ******** when I got here. No pests, fortunately, and I'm pretty sure the landlord has no idea what goes on here, and doesn't care. I've only ever met the maintenance man, who handles move-ins, plus he picks up rent from the dropbox every week. I haven't seen him since the day I moved in, and he even told me as much that I'll never meet the owner. The psycho has his room on the 3rd floor, I'm one of two on the 2nd floor, and there's one person below me. The bathroom is shared, as is the kitchen, which I never use. Only one burner on the stove works anyway. On my first day, I texted about the broken toilet seat, and the Landlord asked me what happened. WTF? Third-Floor Psycho is the only other person who's walking around raging regularly. Everyone else recognizes the general "peace" of the environment. Unfortunately I have to be here at least a few more months, while I'm still paying off old bills, and re-establishing myself in a new city. It's a slow journey, but a steady one. I just happen to hit a ****** rest stop here and there.

• 
  AiMind (@AIMind_Ai) reported 48 minutes ago

  A $50 box saves $240 a year on subscriptions and earns $18,000 a year setting it up for clients. No new hardware. Nothing bought at retail. A used office tower. A second-hand drive. One stick of RAM pulled from a dead laptop. The whole build came to 50 dollars. It looks like nothing. Fans humming, one cable to the wall, sitting on a desk next to a coffee cup. The first win is the one nobody talks about. Cloud storage, photo backups, the $20 a month AI plan everyone pays and forgets — all of it moves onto one box you paid for once. 240 dollars a year, gone. The second win is where the money is. Once it runs on your desk, it runs on anyone's. And clients don't pay for parts. They pay to stop bleeding subscriptions. Here's what you actually sell: A private AI trained on their own files, so staff stop pasting company data into a browser. That's $1,500 a setup. A self-hosted file server that kills their Dropbox and Google Workspace bill. $600, plus the relief of never renting storage again. A local automation box that runs invoices, replies, and reports overnight. $900, and it never sends a dollar to a cloud. Then the quiet one: $150 a month to keep it patched and alive. 10 clients on retainer is $1,500 every month before you build a single new one. One setup a week at $1,500 is $18,000 a year. Off hardware other people throw in the bin. I had no degree, no server room, no $2,000 build. Just dead parts and one free weekend. The expensive part of AI was never the compute. It was the monthly bill you agreed to and stopped reading. 50 dollars in. $18,000 out. Same box.

• 
  chimeno (@chimeno) reported 49 minutes ago

  And Dropbox was just an ftp server

• 
  echelon_zero (@echelon_zero) reported 50 minutes ago

  @dhh @renefaurskov Do you have a contact at dropbox that could fix the install on linux to point the dropbox to a folder other than default. Having to pause it and link to another folder after install is mentally unhealthy.

• 
  Phillip Shepard (@Phillip_shepard) reported 52 minutes ago

  @RobertJBye One thing I do on a daily basis - I have a skill that is called the “video analyzer skill” and I record a screen record with my iPhone and microphone one - I talk about all the issues I need fixed while showing it in video - send it via Claude mobile app - it runs the skill - transcribes and makes its self a html doc with the video frames that the issues exist in - then fixes the issues - builds a test flight and I update it - very useful… if the video is too big I send it via Dropbox which syncs to my Mac

• 
  WPBeginner (@wpbeginner) reported 52 minutes ago

  You built your WordPress site over months (or years). One bad plugin/theme update can wipe it all out overnight. 😱 Plugin conflicts. Malware. A botched migration. A hacked server. The disasters that take down WordPress sites usually happen without warning. And here's the mistake most site owners make: they think their hosting provider's backup is enough. It's NOT. If the server fails, you lose both your site and the backup. We share the complete step-by-step guide for backing up your WordPress site the right way. Here is what you will learn: ✅ Use a Backup Plugin (Best for Most People): @DuplicatorWP is what we use across our sites. Full-site backups, disaster recovery links, and restore without having the plugin pre-installed. Free version available, Pro has scheduled backups. ✅ Use Your Hosting Provider's Backup: SiteGround (where WPBeginner is hosted) includes manual and automated daily backups on all plans. Bluehost partners with CodeGuard and Jetpack for their built-in options. ✅ Manual Backup With cPanel or FTP: Use cPanel's Backup Wizard for a full backup, or connect via FileZilla FTP to download your wp-content, themes, plugins, and wp-config.php files directly. ✅ Send Backups to Cloud Storage: Duplicator and UpdraftPlus both connect natively to Google Drive, Dropbox, OneDrive, and Amazon S3. Never store backups on the same server as your website. If your host fails, both are gone. ✅ Set Up Automatic Scheduled Backups: Configure hourly, daily, weekly, or monthly backups in Duplicator based on how often you publish. eCommerce stores and busy blogs need daily. Slower-moving sites can get away with weekly. Ready to protect years of hard work with a proper WordPress backup system? Read the full ultimate step-by-step guide 👇 (Link is in the thread below)

• 
  Ricky Shah (@RickyShahatty) reported 53 minutes ago

  @Claudio_PNW @tax_birdie @AMandoSch Miller wanted the Dropbox released publicly. It is entirely up to the attorney to screen it. A bad client should make an attorney double down their efforts.

• 
  True Become False (@trubecomefalse) reported 54 minutes ago

  @imbabybrooklyn HN had a terrible track record. They were anyi bitcoin 1 month after it launched. Same with Dropbox, discord and a few others off the top of my head.

• 
  grey (@w3b3grey) reported 54 minutes ago

  If you are like me and you wondering, where my IDENTITY PEM FILE is on @flop_labs , I gat you; here is how to find it identity.pem is already saved automatically; the init command writes it to your project folder the moment you run it (typically right in technocore-did-starter/identity.pem). You don't need to do anything extra for it to exist. What "saving" really means here is backing it up safely, since if this file is lost, your DID is unrecoverable (the guide's troubleshooting table says exactly that: "there is no central DID recovery service"). 1. Confirm it's there ls -la ~/technocore-did-starter/identity.pem 2. Back it up to a second location — copy it somewhere other than the working folder, e.g. an external encrypted drive or a password manager that supports file attachments (1Password, Bitwarden both do this): cp ~/technocore-did-starter/identity.pem ~/Desktop/identity-backup.pem Then move that copy off your main disk (external drive, encrypted USB, etc.) rather than leaving a second copy sitting in ~/Desktop long-term. 3. Lock down file permissions so only your user account can read it: chmod 600 ~/technocore-did-starter/identity.pem 4. What NOT to do with it Don't upload it to GitHub, Google Drive, iCloud Drive, Dropbox, or any synced/cloud folder in plaintext. Don't email it to yourself or paste it into a chat (including this one). Don't commit it to *** , the guide's Path B steps even have you run *** ls-files "*.pem" "*.key" before committing specifically to catch this. 5. Remember the passphrase separately from the file The .pem is encrypted, but it's useless without the passphrase you set during init. Store that passphrase somewhere separate from the .pem backup itself (a password manager entry, not a text file sitting next to the key), so a single leaked backup doesn't hand over both pieces at once. NOTE - If you lose either the file or the passphrase, per the guide, there's no recovery; you'd have to run init again and get a brand new DID.

• 
  Martin (@martin_valchev_) reported 57 minutes ago

  Small feature, real problem: Handing a WordPress site to someone else usually means FTP credentials, database dumps, or a shared Dropbox folder that stays there forever. A link that expires and can be revoked is just... better. Security shouldn't require discipline. It should be the default.