How to Share Sensitive Information Securely over the Internet

ByMike Moffit

At some point, most of our communications shifted from analog to digital: letters and phone calls became emails, texts, and video calls. With analog methods, we could generally assume that our private communications would remain private. Few people were going to steam open a letter or wiretap a phone line. The Internet changed that—digital communications, if not properly protected, can be intercepted in bulk far more easily.

Not all everyday communications require strict privacy. Most of us prefer privacy, of course—few people want their dinner plans published for the world to see—but there are typically no consequences of exposure greater than mild embarrassment (McDonald’s again?). But even ordinary people regularly need to share information that could damage their relationships, finances, or careers if it fell into the wrong hands.

Passwords are the most obvious example because their entire point is secrecy. But other sensitive data includes credit card details, bank account numbers, tax documents, retirement planning materials, and health-related information. When you need to share such data, how do you do it securely?

Data at Rest and in Transit

Before exploring specific solutions, you need to think about how information is protected when it’s in transit between systems and when it’s stored somewhere:

In transit: To prevent eavesdropping, focus on communication channels that are encrypted between you and the destination:

  • Between your app and a server: Nearly all Internet-enabled apps, including all Web browsers, use SSL/TLS to protect their connections to servers. A lock icon in a Web browser’s address bar indicates HTTPS encryption, or you can look for https at the start of a website’s URL.
  • End-to-end encryption: Even better is end-to-end encryption, which ensures that not even the service provider can decrypt your traffic. iMessage (blue-bubble conversations), WhatsApp, and Signal provide end-to-end encryption protection (though WhatsApp archives are readable by other Meta apps). SMS messages are not encrypted at all, and RCS conversations only support encryption with the latest Apple and Google updates, plus carrier support. Both SMS and RCS appear as green-bubble conversations.

At rest: Stored data—whether on your computer, at remote email servers, or in the cloud—needs protection too. Two approaches help:

  • Per-file encryption: Encrypt data before sending so even if an attacker figures out how to access the file, it can’t be decrypted without a password. Send the password through a completely different communication channel (called “out-of-band”)—for example, share an encrypted file via email but send the password via Messages.
  • Time- or access-expiring links: Send a link to the information that expires after a short period or after a limited number of views, thereby shrinking the window during which a breach could occur.

Choosing the Right Solution

The best approach for any given communication depends on four factors:

  • Audience: What are your recipients’ technical capabilities? Messages is easy and secure, but only Apple users can access it. Email reaches everyone but offers less protection. A password-protected PDF is probably easier for less-technical users than an encrypted disk image.
  • Content type: Sharing a password differs from sharing a document, which in turn is different from sharing a collection of files.
  • Importance: How problematic would it be if the sensitive information you’re sharing fell into the wrong hands? There’s a world of difference between the password for a club discussion forum and the credentials to your retirement account.
  • Persistence: Does your recipient need to glance at something only once, or do they need to retain a copy permanently?

Eight Secure Sharing Methods

With all that in mind, here are eight secure methods of sharing information that you can employ in different situations:

  1. Use a secure portal when available: Doctors, lawyers, accountants, and other professionals who regularly receive sensitive information often use secure customer portals or services like DocuSign for sending messages, documents, and files. Use whatever system they provide unless you have good reason to doubt their IT competence.
  2. iMessage, Signal, or WhatsApp: For quick sharing of sensitive information, these end-to-end encrypted messaging services work well. They’re particularly useful for sending information that isn’t useful on its own—for instance, send a login URL and username via email but the password separately via Messages.
  3. Self-destructing links: Services like 1ty.me and One-Time Secret generate encrypted links that contain text. Once the recipient views the link, the server deletes the data, and the link self-destructs. If the recipient reports the link was already used, you know it was compromised. Be aware that some email systems automatically scan links, which could trigger premature self-destruction.
  4. Password manager sharing: 1Password, Bitwarden, and some other password managers (but not Apple’s Passwords) offer secure sharing features that make it easy to share credentials with someone who needs to access a particular account. You can create links with expiration dates, limit access to specific email addresses, and cause links to self-destruct after being viewed once.
  5. Password-protected PDF: For documents that could be printed, create a password-protected PDF. From nearly any app, choose File > Print, click the PDF menu at the bottom, and choose Save As PDF. In the Save dialog that appears, click Security Options, select “Require password to open document,” and enter a strong password (online services can remove weak passwords). Share the file however you like, but send the password through a different channel, preferably via an expiring link.
  6. Password-protected disk image: For Mac users sharing files that can’t easily become PDFs, or for sharing collections of files, create a password-protected disk image. In Disk Utility, create a new compressed disk image (File > New Image > Image from Folder), choose an encryption option (256-bit for more sensitive information), and enter a strong password. Again, share the password separately, ideally via an expiring link.
  7. Password-protected Zip archive: A password-protected Zip archive serves the same purpose and may be easier for Windows users to extract. Apps like Keka and BetterZip can create these. For the fastest approach, open Terminal, type zip -er ~/Desktop/filename.zip (with a space at the end), drag in the files you want to compress, press Return, and enter your desired password when prompted.
  8. Time-expiring cloud storage links: Some cloud storage services offer links that expire after a specified time. Dropbox Professional supports this feature, enabling you to share files while ensuring that links become useless in the event of a breach.

There’s no one-size-fits-all solution for securely sharing sensitive information. Match your approach to the sensitivity of the data, your recipient’s capabilities, and how long they need access.

(Featured image by iStock.com/metamorworks)

Social Media: Need to share passwords, financial details, or sensitive documents securely? Email alone isn’t safe enough. Learn eight practical methods—from self-destructing links to encrypted disk images—that protect your data in transit and at rest.

Similar Posts

  • B.B. King – The King of the Blues

    For more than half a century, Riley B. King – better known as B.B. King – defined the blues for a worldwide audience. Since he started recording in the 1940s, he has released over fifty albums, many of them classics. He was born September 16, 1925, on a plantation in Itta Bena, Mississippi, near Indianola. In his youth, he played on street corners for dimes, and would sometimes play in as many as four towns a night. In 1947, he hitchhiked to Memphis, TN to pursue his music career. Memphis was where every important musician of The South gravitated, and it supported a large musical community where every style of African American music could be found. B.B. stayed with his cousin Bukka White, one of the most celebrated blues performers of his time, who schooled B.B. further in the art of the blues.

    B.B.’s first big break came in 1948 when he performed on Sonny Boy Williamson’s radio program on KWEM out of West Memphis. This led to steady engagements at the Sixteenth Avenue Grill in West Memphis, and later to a ten-minute spot on black-staffed and managed Memphis radio station WDIA. “King’s Spot,” became so popular, it was expanded and became the “Sepia Swing Club.” Soon B.B. needed a catchy radio name. What started out as Beale Street Blues Boy was shortened to Blues Boy King, and eventually B.B. King.

    In the mid-1950s, while B.B. was performing at a dance in Twist, Arkansas, a few fans became unruly. Two men got into a fight and knocked over a kerosene stove, setting fire to the hall. B.B. raced outdoors to safety with everyone else, then realized that he left his beloved $30 acoustic guitar inside, so he rushed back inside the burning building to retrieve it, narrowly escaping death. When he later found out that the fight had been over a woman named Lucille, he decided to give the name to his guitar to remind him never to do a crazy thing like fight over a woman. Ever since, each one of B.B.’s trademark Gibson guitars has been called Lucille.

    B.B. was inducted into the Blues Foundation Hall of Fame in 1984 and into the Rock and Roll Hall of Fame in 1987. He received NARAS’ Lifetime Achievement Grammy Award in 1987, and has received honorary doctorates from Tougaloo(MS) College in 1973; Yale University in 1977; Berklee College of Music in 1982; Rhodes College of Memphis in 1990; Mississippi Valley State University in 2002 and Brown University in 2007. In 1992, he received the National Award of Distinction from the University of Mississippi.

    B.B. King came to Vermont many times and I had the pleasure of being at several of his concerts. He died last year at the age of 90 and was performing to sold out crowds right up until he died. B.B. King is gone but the –The Thrill is Gone- lives forever.

  • Emily's Favorite Mac Accessories

    I am the kind of gal that admittedly likes gadgets and accessories just because they are cool, I don’t even need to have a use for them to make me want one! If there is a new iPad case, a new speaker, a new product announcement from Apple, I want it. This has resulted in a vast collection over the years of all kinds of gadgets, gizmos and some stuff that I just hang onto for no good reason other than I might need it one day. Some things have been a bit of a fad, others have stood the test of time. Over the years I have found that I few items in my collection of gadgets that have either become invaluable or the kind of item that really stands the test of time.

    p{text-align: center;}. !http://blog.smalldog.com/images/4651.jpg!

    My first must have and favorite gadgets are portable bluetooth speakers, and I have had several over the years. The battery powered speakers from Skullcandy I had were one of my most favorite pocket sized speakers! It took up little room in my bag and I could have my music wherever I wanted. You never realize how much you miss having music wherever you go until you start to use these kinds of speakers and then suddenly don’t have them! I eventually outgrew my little Skullcandy speakers and upgraded to a larger but still portable Altec system. This speaker system went everywhere with us. In fact, it still travels with us in our camper even though it features a 30 pin connection for our phones. What I loved most about this set up was that it had a rechargeable battery, so unlike my little Skullcandy speakers I didn’t need to worry about carrying around spare AA batteries. It also allows me to use a 3.5mm headphone cable and an FM radio. I recently started to use the “**Outdoortech Turtle Shell**”:http://www.smalldog.com/product/85338/outdoor-tech-turtle-shell-2-0-rugged-wireless-boombox-electric-blue speakers to replace the old Skullcandy speakers for immediate portable sound, and as a huge bonus this speaker is bluetooth, something none of my previous portable units had. I will admit, I still haven’t found a better replacement for my aging Altec portable speaker as far as sound quality goes, but I will also admit finding a newer solution would require my having to let go!

    My second must-have gadget is an airport express base station. You might be surprised that it is not the Airport Extreme. Why do I love the “**airport express**”:http://www.smalldog.com/product/80932/apple-airport-express-base-station-802-11n-wi-fi so much? Well part of it might be a bit nostaglic. It was my first introduction into wireless speakers. How cool was it to plug in my Harmon Kardon speakers, simply tap my iPhone while sitting on the couch, and my speakers came to life like magic? But the great features don’t stop there. It’s a really powerful and inexpensive wireless router. For many, we don’t have huge areas we need to cover with wireless. Maybe it’s just a small apartment, or perhaps your house just isn’t that big. When I first started to use the airport express the one draw back was that the only ethernet port had to be designed (in most cases) for your internet modem, but in recent years Apple has added a second ethernet port allowing for more flexibility and versatility with this little gem.

    p{text-align: center;}. !http://blog.smalldog.com/images/4650.jpg!

    iPad and iPhone cases are another huge weakness of mine. I probably have no less then five cases for my phone and for my iPad. You could say I collected cases like some girls collect shoes! But on a serious note, this is a very important accessory for your iPhone or your iPad. Some folks prefer form fitting and minimal, others prefer a more rugged case. I have come to prefer several cases. However, I think cases that combine both slim form factor and serious protection are the “**Lifeproof**”:http://www.smalldog.com/wag900002119 cases. I have one for my phone and one for my iPad. What I love most of them is that they come off easily! I don’t always want a heavy duty case on my devices, but have found that many cases that offer greater levels of protection end up being very difficult to take off your device.