Enterprise-level setting that allows administrators to enable OTP by default whenever a user selects “People with the link.”
In the same vein as this - One-Time Passcode capability for public shared links recently announced in this Box article [one-time%20passcode%20(otp)%20for%20public%20shared%20links%20is%20now%20generally%20available%20(oct%202026)%20–%20box%20support]. It provides a useful additional security option, particularly when users need to use “People with the link”.
One enhancement I think would significantly improve security would be an enterprise-level setting that allows administrators to enable OTP by default whenever a user selects “People with the link.”
Also, an organization could also configure which OTP option is the default:
Anyone with an email
Only people added to the link’s access list
The user could still disable OTP if needed, but the secure option would be enabled by default. We have seen users get confused by the different shared-link access types and, even with education, sometimes unintentionally create a more open link than intended. Having OTP enabled by default would provide an additional layer of protection in those situations without preventing users from sharing when there is a legitimate need.
AdminApurva Parikh
(Admin, Box)
shared this idea
-
AdminApurva Parikh
(Admin, Box)
commented
Correct link to the announcement in the post: https://support.box.com/hc/en-us/articles/56686420437395-One-time-Passcode-OTP-for-Public-Shared-Links-is-now-generally-available