Cloud File Sharing Services Compared: Permissions, Security, and Limits

Dropbox remains particularly easy to understand when the goal is simply to give someone access to a file or folder.

A view-only link can be sent to someone who does not have a Dropbox account. The recipient can open the link in a browser, preview supported files, and download the content without creating an account.

That low-friction approach is useful when sending files to clients, contractors, family members, or anyone else who should not have to join another platform just to retrieve something.

Dropbox also separates casual link sharing from more controlled access.

Shared Links Can Be Tightened When Needed

Eligible paid plans can add controls such as:

• link passwords
• expiration dates
• disabled downloads
• view-only access
• team-level restrictions

This gives the sender a choice between convenience and tighter control.

A public link may be appropriate for an ordinary brochure or event photo folder. A password and expiration date make more sense when the file contains information that should only remain available temporarily.

Dropbox’s current shared-link documentation explains its expiration and download controls, while its external-sharing guidance confirms that people can open shared files without having Dropbox accounts.

File Requests Work in the Other Direction

Sharing is not always about sending files out.

Sometimes the problem is collecting documents from someone else.

Dropbox File Requests create an upload link that can be sent to people even if they do not have Dropbox accounts. Their uploads go into a folder selected by the requester rather than giving contributors access to the rest of that Dropbox folder.

That is useful for collecting applications, client files, project assets, photographs, or other submissions.

Current limits depend on the plan. Basic, Plus, and Family accounts can request files up to 2 GB, while several professional and business tiers can accept individual requested files up to 250 GB.

Large Files Are Less Restrictive Than They Used to Be

Dropbox currently allows individual files as large as 2 TB, although the recommended upload method changes for very large files. Browser uploads have lower practical limits, while the desktop application or API is better suited to the largest files.

That gives Dropbox considerably more headroom than ordinary email attachments and many entry-level file-sharing services.

Where it fits: External sharing where recipients should be able to open files with minimal friction, with stronger controls available when needed.

Main tradeoff: Some of the most useful link-security features depend on the plan, and ongoing collaboration still works best when collaborators become part of the Dropbox workflow.

Google Drive becomes more distinctive when the recipient needs to do something with the file rather than simply download it.

Its sharing model is closely connected to Google Docs, Sheets, Slides, and the rest of the Workspace environment.

Permissions Describe What the Recipient Can Do

For files in My Drive, Google uses familiar roles:

• Viewer for read access
• Commenter for feedback without direct editing
• Editor for making changes

Owners can also choose between restricted access and broader “Anyone with the link” sharing.

Google’s current Drive sharing documentation lays out those roles and confirms that owners can use public link access where the account or organization permits it.

This model works particularly well when the shared file is a working document.

Instead of emailing a Word document back and forth, several people can work on the same document, comment, suggest changes, and continue using one version.

External Collaboration Can Go Beyond Google Accounts

Organizations using Google Workspace can also enable visitor sharing.

That allows people without Google Accounts to access supported files after verifying their identity, with permissions such as viewing, commenting, or editing. Visitor access is periodically reverified rather than remaining permanently anonymous.

This provides more identity control than an unrestricted link while avoiding a permanent account requirement for every external collaborator.

Large Stored Files Are Supported, but Collaboration Is the Stronger Story

Google Drive can store individual non-Google files up to 5 TB when sufficient account storage is available.

That sounds impressive, but raw capacity is not the main reason Drive belongs in this comparison.

Its real advantage is the relationship between sharing permissions and collaborative documents.

Where it fits: Projects where recipients need to view, comment on, or edit shared content rather than simply receive a download.

Main tradeoff: Advanced access controls and external-collaboration behavior can depend on Workspace settings, and Drive is less purpose-built for controlled file collection than platforms with dedicated file-request tools.

OneDrive’s sharing model becomes especially useful when an organization wants different levels of trust for different recipients.

Microsoft distinguishes between three important link types.

Anyone Links Prioritize Convenience

An Anyone link can be opened by whoever possesses it, without authentication.

That makes sharing easy, but it also means the link can be forwarded.

Microsoft describes these links as transferable and revocable. The owner can disable the link, but while it remains active, possession of the URL can be enough to gain access.

Organization Links Keep Sharing Internal

A People in your organization link works only for authenticated members of the Microsoft 365 organization.

This makes more sense for internal files that should circulate freely among employees without becoming externally accessible.

Specific People Links Tie Access to Named Recipients

A Specific people link is more restrictive.

Only the recipients selected by the sender can use it, and those recipients need to authenticate as the identities named in the sharing configuration. Microsoft describes these links as nontransferable, meaning forwarding the URL does not automatically give another person access.

That distinction is valuable for client documents, contracts, financial material, or other files where the recipient’s identity matters.

Administrators Can Control External Sharing Centrally

Microsoft 365 organizations can further limit sharing by domain, security group, guest-access policy, link expiration, and other administrative controls.

OneDrive settings can also be made more restrictive for particular users.

That makes OneDrive less about a single universal “share” button and more about fitting file access into an organization’s identity and governance rules.

Individual files can currently be as large as 250 GB.

Where it fits: Microsoft 365 environments where the difference between anonymous, internal, guest, and specifically authenticated access matters.

Main tradeoff: The sharing model can feel more complex than a simple public link, particularly when organizational policies add restrictions.

Box takes access control further into business content management.

A shared file can be opened through a simple link, but Box also distinguishes between different audiences and different actions those audiences are allowed to take.

Shared Links Can Target Different Audiences

Depending on the account and administrator settings, Box links can be limited to:

• people with the link
• people in the company
• invited people only

An open link can work without a Box account.

More restrictive options can require the recipient to belong to the organization or already be an invited collaborator.

Viewing and Downloading Are Separate Permissions

Box can also distinguish between what a recipient sees and what they can take away.

Available link actions can include:

• view only
• view and download
• edit

Password protection and automatic expiration are available on eligible paid accounts, subject to administrator controls.

That makes Box particularly useful when the sharing question is more specific than “Can this person open the file?”

For example, an organization might want a client to preview a document without downloading it, allow an agency to edit working files, or make a public asset downloadable for a limited period.

File Requests Turn Sharing Into a Collection Workflow

Box File Request is particularly strong for businesses collecting information from outsiders.

A company can create a web form that accepts files from people who do not have Box accounts. The form can also collect metadata alongside the upload, such as client names, project numbers, or other required information.

That makes the feature useful for workflows such as:

• client document collection
• vendor invoices
• job applicant documents
• creative submissions
• onboarding files

The requester can also add security options or require submitters to authenticate when stronger identity assurance is necessary.

File Limits Vary Widely by Plan

Box is one service where quoting a single maximum file size is misleading.

Current limits range from 250 MB on free personal accounts to 500 GB on Enterprise Advanced, with intermediate business tiers allowing progressively larger files.

That makes the selected plan especially important for teams sharing media, engineering files, large archives, or other heavyweight content.

Where it fits: Businesses that need detailed permissions, controlled external access, and structured collection of files from clients or partners.

Main tradeoff: Many of the most useful security, file-request, and large-file capabilities are tied to business or higher-tier plans.

Sync.com approaches file sharing from a privacy-first starting point.

Its shared links can be relatively simple, but paid plans expose a deeper set of controls for users who want to manage exactly how a recipient interacts with a file.

Link Permissions Go Beyond Passwords

Depending on the plan, Sync.com can provide:

• passwords
• expiration dates
• download-count limits
• preview-only access
• revoked links
• file-upload links
• activity notifications
• editable document links
• end-to-end encrypted sharing

Its current link-permission documentation explains these controls in detail.

Download limits are particularly useful for a file that should only be retrieved a limited number of times.

Preview-only access is another useful distinction. The recipient can inspect a supported document through Sync without receiving the normal download option.

No browser-based restriction can guarantee that readable information is impossible to copy, but removing the direct download path still provides a meaningful access-control layer.

Enhanced Privacy Adds a Security and Convenience Tradeoff

Sync.com can add end-to-end encryption to shared links through its enhanced privacy option.

That stronger protection comes with limitations.

Some media streaming, previews, download acceleration, and browser editing features are reduced or unavailable. Large files can also create compatibility issues with certain browsers or devices under the enhanced privacy mode.

This illustrates a broader principle in cloud file sharing:

The most private sharing mode is not always the most convenient sharing mode.

The correct balance depends on the sensitivity of the file and the technical comfort of the recipient.

File Requests Can Hide Other People’s Uploads

Paid Sync.com plans can turn a folder link into a file request.

Recipients do not need Sync accounts, and the sender can decide whether contributors are allowed to see files other people have uploaded to the same folder.

That makes it useful for collecting sensitive submissions from several unrelated clients without exposing one client’s files to another.

Stored Files Do Not Have a Small Hard Ceiling

Sync says its desktop and mobile apps can transfer files of any size as long as sufficient account storage is available, although desktop performance may slow for individual files larger than about 40 GB.

Where it fits: Sharing sensitive files when passwords, expiration, download controls, file requests, and optional end-to-end encrypted links matter.

Main tradeoff: Stronger privacy modes can reduce previews, editing, streaming, or compatibility, creating more friction for recipients.

WeTransfer solves a different problem from most of the other services in this comparison.

The usual goal is not:

“I want you to keep working inside this folder.”

It is:

“I need you to receive these files.”

That distinction makes WeTransfer particularly useful for videos, design exports, photography deliveries, presentations, archives, and other files that need to move from one person to another without creating a long-term collaboration environment.

Transfers Are Designed to Expire

Traditional cloud drives keep files until the owner removes them or runs out of storage.

WeTransfer is built around transfers that remain available for a limited period.

A current free account can send up to 10 transfers, or up to 3 GB in total, during a 30-day period. Free transfers normally remain active for between one and three days.

That temporary nature can be an advantage when files only need to remain available long enough for the recipient to retrieve them.

Links and Email Transfers Solve Slightly Different Problems

An email transfer is sent to named recipients.

A link transfer produces a URL that can be distributed through email, messaging, or another channel, and the same link can be sent to as many people as needed.

Current free accounts can send email transfers to as many as 10 recipients at once, while paid subscriptions increase that number.

Access Control Has Become More Granular

WeTransfer now supports more than completely open transfer links.

Its access-control tools can distinguish between tracked downloads and restricted downloads. Restricted transfers can require recipients to verify an email address against an approved access list, while the sender can receive download activity information.

Passwords provide another layer for transfers where an open URL is not sufficient.

File Requests Reverse the Transfer

WeTransfer can also request files from other people rather than only sending them.

The requester creates a link, receives the submissions, and can close the request when no further files are needed.

This works well for collecting deliverables without turning the sender and recipient into long-term collaborators.

Where it fits: Temporary delivery when the recipient needs to download files rather than work inside a persistent shared storage environment.

Main tradeoff: It is less suited to long-running folder collaboration, versioned working files, and shared document editing.