VIEW THIS AS

Auto mode follows the Route Engine until you choose a viewpoint.

YOU ARE HERE

ROUTE CHECK

CONNECTED TO

WHAT NEXT

Use the canonical route for this room, or HELP if you are unsure.

Why English? | Reading Dropbox Shared-Link Settings Before Sending a Project Folder

Three students work together at a classroom table, reviewing open textbooks and notes.

Dropbox shared-link settings matter because a link for viewing, a link for editing and direct membership in a folder create different routes into the same project space.

This guide explains why English matters when reading Dropbox shared-link settings before sending a project folder. It covers audience, view and edit links, direct access, team-only controls, passwords, expiry, disabled downloads, folder-wide restrictions, ownership and handover.

The practical value is deliberate collaboration. Students and adults can state who receives a route, what that route permits, which controls depend on the account plan, and what remains after a link expires or is disabled.

eduKateSG · Why English? · Shared-folder literacy

Read the route, role and restriction before copying the link

A safe sharing sentence names the folder, audience, allowed action, access route, time limit and review owner.

Reading routes

  • Separate links from direct folder access: Chapters 1–4.
  • Read view, edit and audience controls: Chapters 5–8.
  • Use passwords, expiry and download controls accurately: Chapters 9–12.
  • Build a school-to-work sharing routine: Chapters 13–17.

Fact-check boundary, 3 November 2026: Dropbox Help, updated 20 February 2026, says a shared-link owner can decide who sees link contents and what people can do. It distinguishes links for viewing and editing from direct access. Link passwords, expiry and disabled downloads are limited to listed paid plans; link restrictions do not remove permissions that a person already has through direct membership or another route. Disabling downloads removes Dropbox’s download control but does not prevent every other way of saving content. Folder link restrictions can require non-members to request access.

Chapter 1 of 17: A shared link is a route, not the folder itself

What this sharing control changes

A Dropbox link points people to a file or folder under a selected audience and capability. The source object continues to have an owner, members, history and possibly other links.

The wording that reveals the boundary

The noun link names a route. It does not mean attachment, duplicate, ownership transfer or a complete list of everyone who can reach the material.

For “A shared link is a route, not the folder itself”, complete a route sentence: “This person reaches this folder through this link or membership route; the route permits these actions; this restriction ends or is reviewed at this time.” Then compare that sentence with the live Dropbox panel. Precise nouns expose whether “share” refers to a link, an invitation, a team rule or an existing permission.

A project example, limitation and check

A group sends a folder link to an adviser. Before sending, it checks whether the adviser is being given a viewing route or added as a working member.

A correct link cannot repair an unsuitable folder. Remove unrelated files and personal data before sharing.

  • Name the folder exactly.
  • Identify the owner.
  • List current members.
  • Choose link or direct access deliberately.

Explain the difference between “send the folder” and “send a route to the folder.”

Transfer “A shared link is a route, not the folder itself” to school portals, cloud drives and workplace repositories by separating the object, audience, capability and route. A restriction on one link does not automatically change direct membership, inherited access, exports or another person’s link. English makes those parallel routes visible before a deadline turns ambiguity into a data problem.

Back to reading routes · Next chapter

Chapter 2 of 17: Direct access and link access are separate permission paths

What this sharing control changes

Dropbox notes that link settings apply to people using that link. Someone added directly, or already authorised, keeps existing permissions even if the link is more restrictive.

The wording that reveals the boundary

The phrases through the link and already has access describe different causes of access. A restriction must be attached to the route it actually governs.

For “Direct access and link access are separate permission paths”, complete a route sentence: “This person reaches this folder through this link or membership route; the route permits these actions; this restriction ends or is reviewed at this time.” Then compare that sentence with the live Dropbox panel. Precise nouns expose whether “share” refers to a link, an invitation, a team rule or an existing permission.

A project example, limitation and check

A former project editor still opens a folder after a view link is disabled because the person remains a direct member. The owner reviews membership instead of assuming the link controlled everything.

Group, team and inherited arrangements may add more routes. Use Manage access or the relevant account view rather than relying on memory.

  • Review direct members.
  • Review active links.
  • Check team groups.
  • Remove obsolete routes separately.

Draw two arrows to the same folder: one for membership and one for a shared link.

Transfer “Direct access and link access are separate permission paths” to school portals, cloud drives and workplace repositories by separating the object, audience, capability and route. A restriction on one link does not automatically change direct membership, inherited access, exports or another person’s link. English makes those parallel routes visible before a deadline turns ambiguity into a data problem.

Did you know? Dropbox explicitly warns that link restrictions do not affect a person who was added directly or already had access. One folder can therefore have several independent access routes.

Back to reading routes · Previous chapter · Next chapter

Chapter 3 of 17: A viewing link protects the source from edits, not from every copy

What this sharing control changes

A view link allows recipients to inspect content without receiving edit authority through that link. Depending on file type and settings, downloading or other forms of saving may still be possible.

The wording that reveals the boundary

The verb view describes interaction with the live source. It is not a universal promise that information cannot be copied, photographed, exported or remembered.

For “A viewing link protects the source from edits, not from every copy”, complete a route sentence: “This person reaches this folder through this link or membership route; the route permits these actions; this restriction ends or is reviewed at this time.” Then compare that sentence with the live Dropbox panel. Precise nouns expose whether “share” refers to a link, an invitation, a team rule or an existing permission.

A project example, limitation and check

Students share an approved poster for viewing only after removing draft notes, assessment comments and unused personal photographs.

Technical controls should support, not replace, appropriate content selection and clear use expectations.

  • Clean the folder first.
  • Use view when contribution is not required.
  • Check download options.
  • State the permitted use.

Write one truthful sentence about what view access does and does not control.

Transfer “A viewing link protects the source from edits, not from every copy” to school portals, cloud drives and workplace repositories by separating the object, audience, capability and route. A restriction on one link does not automatically change direct membership, inherited access, exports or another person’s link. English makes those parallel routes visible before a deadline turns ambiguity into a data problem.

Back to reading routes · Previous chapter · Next chapter

Chapter 4 of 17: An editing link changes a recipient from reader to contributor

What this sharing control changes

Dropbox provides distinct link settings for editing and viewing in supported sharing flows. An edit route should match a real contribution task.

The wording that reveals the boundary

The verb edit grants authority to change content or structure through that route. It should be paired with scope: which files, which changes and by when.

For “An editing link changes a recipient from reader to contributor”, complete a route sentence: “This person reaches this folder through this link or membership route; the route permits these actions; this restriction ends or is reviewed at this time.” Then compare that sentence with the live Dropbox panel. Precise nouns expose whether “share” refers to a link, an invitation, a team rule or an existing permission.

A project example, limitation and check

A team gives edit access to two co-authors while external reviewers receive a view link and submit feedback in a separate channel.

Version history can help recover mistakes, but it is not a substitute for least privilege or an agreed master-file owner.

  • Name the editing task.
  • Limit the audience.
  • Set a review point.
  • Keep a recovery plan.

Rewrite “have a look and fix it” as a scoped editing request.

Transfer “An editing link changes a recipient from reader to contributor” to school portals, cloud drives and workplace repositories by separating the object, audience, capability and route. A restriction on one link does not automatically change direct membership, inherited access, exports or another person’s link. English makes those parallel routes visible before a deadline turns ambiguity into a data problem.

Back to reading routes · Previous chapter · Next chapter

Chapter 5 of 17: Anyone with the link is an audience rule based on possession

What this sharing control changes

Where available, Anyone with link means people who obtain the link can use it under the selected capability. The first message is not the final boundary because links can be forwarded or stored.

The wording that reveals the boundary

The word anyone widens the possible audience; with the link identifies possession rather than a verified list of named people.

For “Anyone with the link is an audience rule based on possession”, complete a route sentence: “This person reaches this folder through this link or membership route; the route permits these actions; this restriction ends or is reviewed at this time.” Then compare that sentence with the live Dropbox panel. Precise nouns expose whether “share” refers to a link, an invitation, a team rule or an existing permission.

A project example, limitation and check

A public event handout may suit a broad view link, while a draft containing participant names does not.

Team administrators can restrict public links. Do not move files to a personal account merely to avoid an organisational control.

  • Remove unnecessary data.
  • Choose the narrowest audience.
  • Avoid posting in broad chats.
  • Review after the event.

Classify five project files as public-link, team-only or named-person material.

Transfer “Anyone with the link is an audience rule based on possession” to school portals, cloud drives and workplace repositories by separating the object, audience, capability and route. A restriction on one link does not automatically change direct membership, inherited access, exports or another person’s link. English makes those parallel routes visible before a deadline turns ambiguity into a data problem.

Back to reading routes · Previous chapter · Next chapter

Chapter 6 of 17: Team members narrows the link to an organisational audience

What this sharing control changes

Dropbox documents a Team members audience for applicable team accounts. It limits the link route to authenticated members of that team.

The wording that reveals the boundary

Team members names an account boundary, not everyone collaborating informally on a project and not automatically every parent, mentor or vendor.

For “Team members narrows the link to an organisational audience”, complete a route sentence: “This person reaches this folder through this link or membership route; the route permits these actions; this restriction ends or is reviewed at this time.” Then compare that sentence with the live Dropbox panel. Precise nouns expose whether “share” refers to a link, an invitation, a team rule or an existing permission.

A project example, limitation and check

A school operations team shares an internal planning folder with the institutional team and sends a separately approved final brief to external guests.

Team membership can be broader than a small working group. Check whether the entire team needs the information.

  • Confirm the team name.
  • Check the folder purpose.
  • Use groups where supported.
  • Create a separate external deliverable.

Turn “internal” into a named audience rather than an assumption.

Transfer “Team members narrows the link to an organisational audience” to school portals, cloud drives and workplace repositories by separating the object, audience, capability and route. A restriction on one link does not automatically change direct membership, inherited access, exports or another person’s link. English makes those parallel routes visible before a deadline turns ambiguity into a data problem.

Back to reading routes · Previous chapter · Next chapter

Chapter 7 of 17: Folder link restrictions can require non-members to request access

What this sharing control changes

Dropbox says a folder-level link restriction can apply across the folder and its contents, requiring people who are not folder members to request access when following links.

The wording that reveals the boundary

The phrase link restrictions describes a blanket rule for link access. It does not remove direct members or prove that every nested item has no other authorised route.

For “Folder link restrictions can require non-members to request access”, complete a route sentence: “This person reaches this folder through this link or membership route; the route permits these actions; this restriction ends or is reviewed at this time.” Then compare that sentence with the live Dropbox panel. Precise nouns expose whether “share” refers to a link, an invitation, a team rule or an existing permission.

A project example, limitation and check

A project owner enables the restriction before storing several working files, then tests a harmless link with a non-member account.

Account plan, administrator policy and existing membership affect availability and outcome. Read the current panel.

  • Inventory members first.
  • Enable the rule where authorised.
  • Test as a non-member.
  • Review access requests promptly.

Explain why a request-access screen is not necessarily a broken link.

Transfer “Folder link restrictions can require non-members to request access” to school portals, cloud drives and workplace repositories by separating the object, audience, capability and route. A restriction on one link does not automatically change direct membership, inherited access, exports or another person’s link. English makes those parallel routes visible before a deadline turns ambiguity into a data problem.

Back to reading routes · Previous chapter · Next chapter

Chapter 8 of 17: The share message must agree with the actual permission

What this sharing control changes

A precise note helps recipients understand the file, role and deadline, but words in an email cannot override Dropbox settings.

The wording that reveals the boundary

“Please review” may mean view, comment elsewhere or edit. Replace it with an explicit action and confirm the permission supports that action.

For “The share message must agree with the actual permission”, complete a route sentence: “This person reaches this folder through this link or membership route; the route permits these actions; this restriction ends or is reviewed at this time.” Then compare that sentence with the live Dropbox panel. Precise nouns expose whether “share” refers to a link, an invitation, a team rule or an existing permission.

A project example, limitation and check

A student writes, “Read the 3 November proposal; add feedback in our class form; do not edit the folder; reply by Friday.”

A clear request can still be sent to the wrong address. Verify both recipient and access route.

  • Name the version.
  • State the requested action.
  • Add the deadline.
  • Open the link after sending.

Create a four-line message that matches a view-only link.

Transfer “The share message must agree with the actual permission” to school portals, cloud drives and workplace repositories by separating the object, audience, capability and route. A restriction on one link does not automatically change direct membership, inherited access, exports or another person’s link. English makes those parallel routes visible before a deadline turns ambiguity into a data problem.

Back to reading routes · Previous chapter · Next chapter

Chapter 9 of 17: A password protects one shared-link route

What this sharing control changes

Dropbox says supported plans can require a password for a shared link. The recipient must enter it to use that link, but people with direct access remain governed by their existing permissions.

The wording that reveals the boundary

The phrase require password adds an authentication step to the link. It is not encryption of every copy or removal of other access routes.

For “A password protects one shared-link route”, complete a route sentence: “This person reaches this folder through this link or membership route; the route permits these actions; this restriction ends or is reviewed at this time.” Then compare that sentence with the live Dropbox panel. Precise nouns expose whether “share” refers to a link, an invitation, a team rule or an existing permission.

A project example, limitation and check

A competition team password-protects a temporary reviewer link and sends the password through an approved separate channel.

Password features depend on listed plans and administrator controls. Avoid weak or reused passwords and follow organisational policy.

  • Check plan availability.
  • Use a strong unique password.
  • Send it separately.
  • Remove the link after review.

Describe exactly which route the password protects.

Transfer “A password protects one shared-link route” to school portals, cloud drives and workplace repositories by separating the object, audience, capability and route. A restriction on one link does not automatically change direct membership, inherited access, exports or another person’s link. English makes those parallel routes visible before a deadline turns ambiguity into a data problem.

Back to reading routes · Previous chapter · Next chapter

Chapter 10 of 17: An expiration date disables the link at a planned time

What this sharing control changes

Dropbox says a supported shared link can expire at 11:59 p.m. on the selected day in the owner’s time zone. After expiry, that link stops working until its date is changed or a new route is provided.

The wording that reveals the boundary

The verb expire applies to the link, not the source folder, direct members, previous downloads or another active link.

For “An expiration date disables the link at a planned time”, complete a route sentence: “This person reaches this folder through this link or membership route; the route permits these actions; this restriction ends or is reviewed at this time.” Then compare that sentence with the live Dropbox panel. Precise nouns expose whether “share” refers to a link, an invitation, a team rule or an existing permission.

A project example, limitation and check

A group lets an external coach view a rehearsal folder until the final submission date and schedules a next-day access review.

Time zones, plan availability and project extensions require explicit communication. Do not let an automated end date surprise essential collaborators.

  • Choose a purpose-based date.
  • State the time zone.
  • Calendar the review.
  • Check other access routes.

Write an expiry notice that does not imply the folder will be deleted.

Transfer “An expiration date disables the link at a planned time” to school portals, cloud drives and workplace repositories by separating the object, audience, capability and route. A restriction on one link does not automatically change direct membership, inherited access, exports or another person’s link. English makes those parallel routes visible before a deadline turns ambiguity into a data problem.

Did you know? Dropbox says a supported link expires at 11:59 p.m. on the chosen date in the owner’s time zone—not necessarily the recipient’s time zone.

Back to reading routes · Previous chapter · Next chapter

Chapter 11 of 17: Disabling downloads removes a Dropbox action, not every capture method

What this sharing control changes

Dropbox says supported accounts can disable downloads for a viewing link, greying out the Download control. It also warns that people may still save content using other methods.

The wording that reveals the boundary

The word disable is scoped to the product action. It should not be expanded into “impossible to copy” or “guaranteed confidential.”

For “Disabling downloads removes a Dropbox action, not every capture method”, complete a route sentence: “This person reaches this folder through this link or membership route; the route permits these actions; this restriction ends or is reviewed at this time.” Then compare that sentence with the live Dropbox panel. Precise nouns expose whether “share” refers to a link, an invitation, a team rule or an existing permission.

A project example, limitation and check

A teacher shares an approved reference for browser viewing and enables the control, while still avoiding student-sensitive material.

Some file types cannot be previewed and require downloads to be shareable. Availability depends on the item and account.

  • Use view link first.
  • Check preview support.
  • Test recipient experience.
  • Keep sensitive content minimal.

Write a limit statement suitable for a parent or project partner.

Transfer “Disabling downloads removes a Dropbox action, not every capture method” to school portals, cloud drives and workplace repositories by separating the object, audience, capability and route. A restriction on one link does not automatically change direct membership, inherited access, exports or another person’s link. English makes those parallel routes visible before a deadline turns ambiguity into a data problem.

Back to reading routes · Previous chapter · Next chapter

Chapter 12 of 17: Link customisation belongs to the link creator

What this sharing control changes

Dropbox notes that password, expiry and download settings apply to shared links a person creates, not automatically to a different collaborator’s link.

The wording that reveals the boundary

The possessive phrase your shared link identifies ownership of the route. Team members can otherwise create parallel routes under their permissions.

For “Link customisation belongs to the link creator”, complete a route sentence: “This person reaches this folder through this link or membership route; the route permits these actions; this restriction ends or is reviewed at this time.” Then compare that sentence with the live Dropbox panel. Precise nouns expose whether “share” refers to a link, an invitation, a team rule or an existing permission.

A project example, limitation and check

A team appoints one sharing owner instead of letting every editor issue untracked external links.

Administrative rules may constrain creation, but project governance still needs names, logs and periodic review.

  • Assign a link owner.
  • Record active links.
  • Limit external publishers.
  • Close stale routes.

Create a small access register with owner, purpose, audience and end date.

Transfer “Link customisation belongs to the link creator” to school portals, cloud drives and workplace repositories by separating the object, audience, capability and route. A restriction on one link does not automatically change direct membership, inherited access, exports or another person’s link. English makes those parallel routes visible before a deadline turns ambiguity into a data problem.

Back to reading routes · Previous chapter · Next chapter

Chapter 13 of 17: A project folder should have an information boundary before sharing

What this sharing control changes

Folders often accumulate drafts, source images, comments, receipts and unrelated personal material. Permission design begins with the collection itself.

The wording that reveals the boundary

The noun project folder can sound tidy while hiding a mixed audience. Name subfolders by purpose and sensitivity.

For “A project folder should have an information boundary before sharing”, complete a route sentence: “This person reaches this folder through this link or membership route; the route permits these actions; this restriction ends or is reviewed at this time.” Then compare that sentence with the live Dropbox panel. Precise nouns expose whether “share” refers to a link, an invitation, a team rule or an existing permission.

A project example, limitation and check

Students place final deliverables in a review folder and keep private planning notes elsewhere.

Moving or copying files can create new versions and owners. Confirm the handover record.

  • Inventory contents.
  • Separate public and working material.
  • Use stable names.
  • Archive superseded drafts.

Make a folder map before changing any sharing control.

Transfer “A project folder should have an information boundary before sharing” to school portals, cloud drives and workplace repositories by separating the object, audience, capability and route. A restriction on one link does not automatically change direct membership, inherited access, exports or another person’s link. English makes those parallel routes visible before a deadline turns ambiguity into a data problem.

Back to reading routes · Previous chapter · Next chapter

Chapter 14 of 17: Parents can coach the access sentence without taking over

What this sharing control changes

A parent can ask a child to identify folder, audience, permission, restriction and end date before the child sends a harmless link.

The wording that reveals the boundary

The goal is not memorising Dropbox menus. It is translating controls into a responsible sentence that can be checked on any platform.

For “Parents can coach the access sentence without taking over”, complete a route sentence: “This person reaches this folder through this link or membership route; the route permits these actions; this restriction ends or is reviewed at this time.” Then compare that sentence with the live Dropbox panel. Precise nouns expose whether “share” refers to a link, an invitation, a team rule or an existing permission.

A project example, limitation and check

A student explains why one classmate edits, the teacher views and the link expires after assessment.

School accounts and age rules may require teacher guidance. Use non-sensitive practice material.

  • Ask who can open it.
  • Ask what they can do.
  • Ask when it ends.
  • Let the student perform the check.

Reverse roles so the student audits the parent’s practice link.

Transfer “Parents can coach the access sentence without taking over” to school portals, cloud drives and workplace repositories by separating the object, audience, capability and route. A restriction on one link does not automatically change direct membership, inherited access, exports or another person’s link. English makes those parallel routes visible before a deadline turns ambiguity into a data problem.

Back to reading routes · Previous chapter · Next chapter

Chapter 15 of 17: Students need a recovery plan before collaborative editing

What this sharing control changes

Shared work can be renamed, moved or changed. A plan for ownership, version naming and recovery makes collaboration resilient.

The wording that reveals the boundary

Words such as owner, editor, approved and archived make responsibility visible.

For “Students need a recovery plan before collaborative editing”, complete a route sentence: “This person reaches this folder through this link or membership route; the route permits these actions; this restriction ends or is reviewed at this time.” Then compare that sentence with the live Dropbox panel. Precise nouns expose whether “share” refers to a link, an invitation, a team rule or an existing permission.

A project example, limitation and check

A group keeps one approved deliverable, uses dated drafts and records who submits the final file.

Recovery options and histories vary by account and retention. Test with practice files rather than assuming every change is reversible.

  • Assign the owner.
  • Agree on naming.
  • Review version history.
  • Record the submitter.

Write a two-minute response plan for an accidental folder change.

Transfer “Students need a recovery plan before collaborative editing” to school portals, cloud drives and workplace repositories by separating the object, audience, capability and route. A restriction on one link does not automatically change direct membership, inherited access, exports or another person’s link. English makes those parallel routes visible before a deadline turns ambiguity into a data problem.

Back to reading routes · Previous chapter · Next chapter

Chapter 16 of 17: Handover means transferring understanding, not only copying a link

What this sharing control changes

At the end of a project, the next owner needs the authoritative folder, audience, active links, expiry dates, members and unresolved requests.

The wording that reveals the boundary

The word handover implies continuity of responsibility. “Here is the link” is incomplete if ownership and access logic remain hidden.

For “Handover means transferring understanding, not only copying a link”, complete a route sentence: “This person reaches this folder through this link or membership route; the route permits these actions; this restriction ends or is reviewed at this time.” Then compare that sentence with the live Dropbox panel. Precise nouns expose whether “share” refers to a link, an invitation, a team rule or an existing permission.

A project example, limitation and check

A graduating CCA leader gives the teacher a short access register and removes temporary external routes after confirmation.

Ownership transfer options differ by account. Follow school or workplace policy and preserve required records.

  • Name the successor.
  • List active routes.
  • Confirm ownership.
  • Close temporary access.

Create a handover note that another person could follow without guessing.

Transfer “Handover means transferring understanding, not only copying a link” to school portals, cloud drives and workplace repositories by separating the object, audience, capability and route. A restriction on one link does not automatically change direct membership, inherited access, exports or another person’s link. English makes those parallel routes visible before a deadline turns ambiguity into a data problem.

Back to reading routes · Previous chapter · Next chapter

Chapter 17 of 17: Shared-link literacy transfers to portfolios and careers

What this sharing control changes

Applications, client review, research collaboration and volunteer projects all require people to match audience and capability to purpose.

The wording that reveals the boundary

Professional English makes accountability testable: exact object, named role, authorised action, duration, owner and revocation route.

For “Shared-link literacy transfers to portfolios and careers”, complete a route sentence: “This person reaches this folder through this link or membership route; the route permits these actions; this restriction ends or is reviewed at this time.” Then compare that sentence with the live Dropbox panel. Precise nouns expose whether “share” refers to a link, an invitation, a team rule or an existing permission.

A project example, limitation and check

An intern shares a cleaned portfolio folder through a view link, keeps working files private and records when external access should end.

Every service uses different labels. Recheck the current product and organisation rather than treating one platform’s wording as universal.

  • Read live settings.
  • Use least privilege.
  • Document important routes.
  • Review after the purpose ends.

Apply the route sentence to another cloud service and compare its vocabulary.

Transfer “Shared-link literacy transfers to portfolios and careers” to school portals, cloud drives and workplace repositories by separating the object, audience, capability and route. A restriction on one link does not automatically change direct membership, inherited access, exports or another person’s link. English makes those parallel routes visible before a deadline turns ambiguity into a data problem.

Back to reading routes · Previous chapter · Continue to the FAQ

A ninety-second Dropbox folder check

Pause before Copy link and convert the panel into a complete access sentence.

  • Name the exact folder and owner.
  • Separate direct members from link users.
  • Choose viewing or editing based on the real task.
  • Set audience, password, expiry or download control where supported.
  • Test with a harmless recipient account.
  • Review and remove obsolete routes after the project.

For parents: ask for the child’s route sentence rather than taking the device. The explanation should identify folder, audience, action, restriction and end date.

For students: the link you copy is only one route. Check direct members and other links before claiming that a folder is private or closed.

Frequently asked questions

Is a Dropbox shared link the same as adding someone to a folder?

No. A shared link and direct access are separate routes, and link restrictions do not remove a person’s existing direct permission.

Does view-only mean the file cannot be saved?

No. It protects the live source from edits through that route; downloads or other capture methods may remain possible.

Can every account add passwords or expiry?

No. Dropbox lists these controls for specified paid plans, and administrator settings can also affect them.

What happens when a link expires?

That link stops working after the selected time; the source and other access routes remain.

Does disabling downloads guarantee confidentiality?

No. Dropbox itself says it prevents downloading through Dropbox but does not stop every other way of saving content.

Useful next reading

English matters because a short Dropbox label can control a long-lived route into a shared project. Naming the object, audience, capability, restriction and end date turns sharing into a decision that can be explained, tested and responsibly closed.