How to Password-Protect Your Resume Page (and When You Actually Should)

A resume website is meant to be shared widely — that's the whole point of a link over a PDF attachment. But "widely" isn't always what you want. Job hunting while still employed, sharing an early draft with a mentor before it's ready for recruiters, or sending a link to exactly one hiring manager are all cases where a fully public page is the wrong default, even temporarily. For those, the page can be locked behind a password or a one-time email code instead of taken down or left unfinished.

Password or email code — the two ways to lock it

From the Share tab in your dashboard, a protected link can require either a password you set yourself (good for sharing verbally or in a message, since there's nothing to check inboxes for) or a one-time code sent to the visitor's email (good when you don't want to hand out a shareable secret at all — only the specific person who receives the code gets in). Either way, the gate covers the whole page, including the "Download PDF" button visitors would otherwise see — so a protected page doesn't quietly leak a PDF around the lock.

Max uses and expiry do the targeting for you

The useful part isn't just the lock, it's the limits you can put on it. A link capped at one use and sent to a single recruiter can't be forwarded usefully — it's spent the moment they open it. An expiry of 24 or 7 days means a link shared for one conversation doesn't stay live indefinitely after that conversation is over. And revoking a link kills access immediately, without needing to change your password or take the page down for everyone else who might have an unprotected copy of the URL.

Most resumes should stay public — this is for the exception

None of this is the default setup, and it shouldn't be: a resume page that needs a password defeats the purpose of a link you can drop into a bio or send with a single click. Reach for protection specifically when the audience is narrow and known in advance — one recruiter, one introduction, a confidential search — and leave the page open the rest of the time. The setting exists for the handful of situations where "anyone with the link" is one person too many, not as a permanent gate in front of a page meant to be seen.