How to Safely Open Secret Links: Spot Phishing and Access Locked Links

Someone sent you a link that asks for a password. Is it safe?

You're scrolling through iMessage or Messenger and someone sends you a link. You tap it, and instead of going straight to a webpage, you see a password prompt. Your first instinct might be suspicion — and that's actually a healthy reaction.

The good news: password-protected links are a legitimate way to share private content. But not every link asking for a password is trustworthy. Here's how to tell the difference and access locked links safely.

What Are Password-Protected Links?

A password-protected link (sometimes called a "locked link" or "secret link") is a URL that requires a password before revealing its content. Services like LOCK.PUB let anyone create these in seconds.

Behind the password, you might find:

• A private URL redirect (to a document, video, or website)
• A secret text memo
• An encrypted chat room
• Time-limited content that expires automatically

The idea is simple: only people who know the password can see what's inside.

How to Tell If a Locked Link Is Safe vs. Phishing

This is the critical skill. Before typing any password into a link, run through these checks:

Safe Link Signs	Phishing Red Flags
Known domain like lock.pub or bit.ly	Unfamiliar domain or misspelled URL
Sent by someone you know and trust	Sent by a stranger or unknown number
Only asks for the link password	Asks for personal info (email, phone, SSN)
Uses HTTPS (lock icon in browser)	No HTTPS or browser shows security warning
Password was shared separately	Unsolicited link with urgency ("Act now!")
Sender explains what the link contains	No context, just a bare link

The two most important checks: verify the domain and verify the sender. If both check out, you're almost certainly fine.

Quick Domain Check

A legitimate locked link will come from a recognizable service. For example, lock.pub/abc123 is clearly from LOCK.PUB. Watch out for lookalike domains like l0ck.pub (with a zero) or lock-pub.xyz — these are classic phishing tricks.

Step-by-Step: How to Open a Password-Protected Link Safely

Follow these steps whenever you receive a locked or secret link:

Step 1: Verify the Sender

Who sent this link? If it came from a friend, coworker, or someone you trust through iMessage, Messenger, or email, that's a good sign. If it came from an unknown number or a random email, don't open it.

Step 2: Check the URL

Before entering any password, look at the actual URL. Is it a known service? Does it use HTTPS? Are there any suspicious characters or misspellings in the domain? You can hover over the link (on desktop) or long-press it (on mobile) to preview the full URL.

Step 3: Enter the Password You Were Given

The sender should have shared the password through a separate channel — maybe a text message, a phone call, or in person. A legitimate password-protected link only asks for the link's password, nothing more.

Step 4: View the Content

Once the password is verified, you'll see the protected content immediately. It could be a link redirect, a memo, a chat room, or other content types.

Step 5: Save What You Need — Content May Expire

Many secret links have an expiration time. Once the link expires, the content becomes permanently inaccessible. If you need to keep the information, copy or save it right away.

Why Do People Use Password-Protected Links?

You might wonder why someone wouldn't just send the information directly. There are solid reasons:

• Privacy — Sharing Wi-Fi passwords, account credentials, or personal info securely
• Expiring content — Links that self-destruct after a set time, leaving no permanent trace
• Sensitive documents — Contracts, legal documents, or confidential business files
• Anonymous communication — Encrypted chat rooms where participants stay anonymous
• Access control — Ensuring only the intended recipient can view the content

Sending sensitive information through a password-protected link is significantly safer than dropping it directly into a chat message where it sits forever in message history.

How to Create Your Own Password-Protected Link

Now that you know how to safely open locked links, you might want to create one yourself. LOCK.PUB lets you create password-protected links, secret memos, and encrypted chat rooms for free — no account required.

Just pick your content type, set a password, and share the link. It takes about 10 seconds.

Create a secret link now -->