Recipients never get the file directly in their inbox — just a short notice with a retrieval code. The actual attachment is stripped out before the email reaches anyone, and stored separately until the right person proves who they are.
Opening the notice
- The recipient opens the notice email and follows the link it contains.
- First time ever receiving something from your organization: they register a passkey — a fingerprint, face, or security key tied to their own device. No password, ever. See signing in with a passkey for what that's like from their side.
- Every time after that: it's a single tap. Their device is already known, so there's no setup step to repeat.
If your organization uses Plus
The very first attachment a brand-new recipient ever receives from your organization goes through one extra step before it's delivered at all — see confirming a recipient's mobile number and what happens after you confirm for what that looks like on both sides. Every attachment after that first one arrives and opens exactly as described above, with no repeated steps.
A recipient's passkey is tied to their device, not to any one attachment or sender.
Once they've registered it, it works for anything sent to them by anyone — there's
nothing separate to set up for a second organization that sends them a file later.