ThrowNotes

Sharing

Shared Notes and Password Protection: What They Do and Do Not Do

Understand how ThrowNotes shared links and room passwords work, including what access control means without end-to-end encryption.

Written and reviewed by ThrowNotes Editorial Team. Published June 8, 2026. Updated July 16, 2026.

Shared notes are invitation links

A shared note is meant for intentional access. You create a link, send it to someone, and that person can open the text without joining your account.

That is useful for quick collaboration, support snippets, checklists, and temporary handoff. It is not a substitute for a private document system.

What a password changes

A room password adds a door in front of the shared note. Link holders need the password before they can read or write the text.

The password is access control. It does not mean the text is end-to-end encrypted, and ThrowNotes does not claim that the server cannot read stored text.

Good shared-note habits

  • Share the link only with people who should edit the note.
  • Use a password when the link might be forwarded.
  • Clear or revoke shared notes when the job is done.
  • Keep secrets and high-risk personal information out of shared notes.

When to use an account room instead

If the note belongs to you and should not be editable by link holders, use an account room. Account rooms are for signed-in private access across your own devices.

Shared links are better when the note is intentionally collaborative or temporary.

A realistic expectation

Shared notes should feel simple and predictable. The important part is knowing who has the link, whether a password is active, and when to stop sharing.

Related reading

Frequently asked questions

Does a room password encrypt my shared note?

No. It is access control that gates who can open the note. ThrowNotes still stores the text and does not offer end-to-end encryption.

Who can read a shared note?

Anyone with the link, unless a password is set, in which case they also need the password. Authorized staff may access stored records under the privacy notice.

When should I use an account room instead of a shared link?

When the note is yours and should not be edited by link holders. Account rooms are for private, signed-in access across your own devices.

Back to articles